CVE-2015-5260

HIGH · 7.8 CVSS Gepubliceerd: 07-06-2016 CWE-119

Beschrijving

Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arbitrary code on the host via QXL commands related to the surface_id parameter.

Vendors

Redhat Debian Canonical Spice Project

Affected products

Enterprise Linux Desktop Enterprise Linux Hpc Node Enterprise Linux Server Enterprise Linux Server Eus Enterprise Linux Workstation Debian Linux Ubuntu Linux Spice Enterprise Linux Hpc Node Eus

References

lists.freedesktop.org
rhn.redhat.com
rhn.redhat.com
www.debian.org
www.oracle.com
www.securityfocus.com
www.securitytracker.com
www.ubuntu.com
bugzilla.redhat.com
security.gentoo.org