Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2016-0749 (GCVE-0-2016-0749)
Vulnerability from cvelistv5
Published
2016-06-09 16:00
Modified
2024-08-05 22:30
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- n/a
Summary
The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T22:30:03.963Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "GLSA-201606-05",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201606-05"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
},
{
"name": "openSUSE-SU-2016:1725",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-updates/2016-07/msg00003.html"
},
{
"name": "USN-3014-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-3014-1"
},
{
"name": "openSUSE-SU-2016:1726",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-updates/2016-07/msg00004.html"
},
{
"name": "RHSA-2016:1205",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2016:1205"
},
{
"name": "DSA-3596",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2016/dsa-3596"
},
{
"name": "RHSA-2016:1204",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2016:1204"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2016-06-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2016-11-28T20:57:01",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "GLSA-201606-05",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/201606-05"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
},
{
"name": "openSUSE-SU-2016:1725",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-updates/2016-07/msg00003.html"
},
{
"name": "USN-3014-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-3014-1"
},
{
"name": "openSUSE-SU-2016:1726",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-updates/2016-07/msg00004.html"
},
{
"name": "RHSA-2016:1205",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2016:1205"
},
{
"name": "DSA-3596",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2016/dsa-3596"
},
{
"name": "RHSA-2016:1204",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2016:1204"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2016-0749",
"datePublished": "2016-06-09T16:00:00",
"dateReserved": "2015-12-16T00:00:00",
"dateUpdated": "2024-08-05T22:30:03.963Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2016-0749\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2016-06-09T16:59:00.127\",\"lastModified\":\"2025-04-12T10:46:40.837\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.\"},{\"lang\":\"es\",\"value\":\"La interacci\u00f3n smartcard en SPICE permite a atacantes remotos provocar un denegaci\u00f3n de servicio (ca\u00edda del proceso QEMU-KVM) o ejecutar, posiblemente, un c\u00f3digo arbitrario a trav\u00e9s de v\u00e9ctores relacionados con conectarse con un invitado VM, lo que ejecuta un desbordamiento de bufer basado en memoria din\u00e1mica.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:C/I:C/A:C\",\"baseScore\":10.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-119\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4863BE36-D16A-4D75-90D9-FD76DB5B48B7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"03117DF1-3BEC-4B8D-AD63-DBBDB2126081\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:scientific_computing:*:*:*\",\"matchCriteriaId\":\"EE7A63D3-B604-436A-8BB3-DBD820FEFAD7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9BBCD86A-E6C7-4444-9D74-F861084090F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5ED5807-55B7-47C5-97A6-03233F4FBC3A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2CF61F35-5905-4BA9-AD7E-7DB261D2F256\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"142AD0DD-4CF3-4D74-9442-459CE3347E3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:scientific_computing:*:*:*\",\"matchCriteriaId\":\"3613D314-10A7-45B2-A43B-9052E9901F3B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"33C068A4-3780-4EAB-A937-6082DF847564\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"39A901D6-0874-46A4-92A8-5F72C7A89E85\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"51EF4996-72F4-4FA4-814F-F5991E7A8318\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1C8D871B-AEA1-4407-AEE3-47EC782250FF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"44B067C7-735E-43C9-9188-7E1522A02491\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"825ECE2D-E232-46E0-A047-074B34DB1E97\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2CF61F35-5905-4BA9-AD7E-7DB261D2F256\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:spice_project:spice:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2285AB1B-2918-4DC6-B9E6-30BD9A52ADD4\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-updates/2016-07/msg00003.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2016-07/msg00004.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.debian.org/security/2016/dsa-3596\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.ubuntu.com/usn/USN-3014-1\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2016:1204\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2016:1205\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://security.gentoo.org/glsa/201606-05\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2016-07/msg00003.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2016-07/msg00004.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2016/dsa-3596\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/USN-3014-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2016:1204\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2016:1205\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.gentoo.org/glsa/201606-05\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
rhsa-2016:1205
Vulnerability from csaf_redhat
Published
2016-06-06 15:55
Modified
2024-11-22 09:56
Summary
Red Hat Security Advisory: spice security update
Notes
Topic
An update for spice is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The Simple Protocol for Independent Computing Environments (SPICE) is a remote display system built for virtual environments which allows the user to view a computing 'desktop' environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures.
Security Fix(es):
* A memory allocation flaw, leading to a heap-based buffer overflow, was found in spice's smartcard interaction, which runs under the QEMU-KVM context on the host. A user connecting to a guest VM using spice could potentially use this flaw to crash the QEMU-KVM process or execute arbitrary code with the privileges of the host's QEMU-KVM process. (CVE-2016-0749)
* A memory access flaw was found in the way spice handled certain guests using crafted primary surface parameters. A user in a guest could use this flaw to read from and write to arbitrary memory locations on the host. (CVE-2016-2150)
The CVE-2016-0749 issue was discovered by Jing Zhao (Red Hat) and the CVE-2016-2150 issue was discovered by Frediano Ziglio (Red Hat).
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for spice is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The Simple Protocol for Independent Computing Environments (SPICE) is a remote display system built for virtual environments which allows the user to view a computing \u0027desktop\u0027 environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures.\n\nSecurity Fix(es):\n\n* A memory allocation flaw, leading to a heap-based buffer overflow, was found in spice\u0027s smartcard interaction, which runs under the QEMU-KVM context on the host. A user connecting to a guest VM using spice could potentially use this flaw to crash the QEMU-KVM process or execute arbitrary code with the privileges of the host\u0027s QEMU-KVM process. (CVE-2016-0749)\n\n* A memory access flaw was found in the way spice handled certain guests using crafted primary surface parameters. A user in a guest could use this flaw to read from and write to arbitrary memory locations on the host. (CVE-2016-2150)\n\nThe CVE-2016-0749 issue was discovered by Jing Zhao (Red Hat) and the CVE-2016-2150 issue was discovered by Frediano Ziglio (Red Hat).",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2016:1205",
"url": "https://access.redhat.com/errata/RHSA-2016:1205"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1300646",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1300646"
},
{
"category": "external",
"summary": "1313496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1313496"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1205.json"
}
],
"title": "Red Hat Security Advisory: spice security update",
"tracking": {
"current_release_date": "2024-11-22T09:56:20+00:00",
"generator": {
"date": "2024-11-22T09:56:20+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2016:1205",
"initial_release_date": "2016-06-06T15:55:01+00:00",
"revision_history": [
{
"date": "2016-06-06T15:55:01+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2016-06-06T15:55:01+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T09:56:20+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "spice-server-0:0.12.4-15.el7_2.1.x86_64",
"product": {
"name": "spice-server-0:0.12.4-15.el7_2.1.x86_64",
"product_id": "spice-server-0:0.12.4-15.el7_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spice-server@0.12.4-15.el7_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"product": {
"name": "spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"product_id": "spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spice-debuginfo@0.12.4-15.el7_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"product": {
"name": "spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"product_id": "spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spice-server-devel@0.12.4-15.el7_2.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "spice-0:0.12.4-15.el7_2.1.src",
"product": {
"name": "spice-0:0.12.4-15.el7_2.1.src",
"product_id": "spice-0:0.12.4-15.el7_2.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spice@0.12.4-15.el7_2.1?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-0:0.12.4-15.el7_2.1.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.2.Z:spice-0:0.12.4-15.el7_2.1.src"
},
"product_reference": "spice-0:0.12.4-15.el7_2.1.src",
"relates_to_product_reference": "7Client-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64"
},
"product_reference": "spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"relates_to_product_reference": "7Client-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-0:0.12.4-15.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64"
},
"product_reference": "spice-server-0:0.12.4-15.el7_2.1.x86_64",
"relates_to_product_reference": "7Client-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-devel-0:0.12.4-15.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64"
},
"product_reference": "spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"relates_to_product_reference": "7Client-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-0:0.12.4-15.el7_2.1.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.2.Z:spice-0:0.12.4-15.el7_2.1.src"
},
"product_reference": "spice-0:0.12.4-15.el7_2.1.src",
"relates_to_product_reference": "7Client-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64"
},
"product_reference": "spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"relates_to_product_reference": "7Client-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-0:0.12.4-15.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64"
},
"product_reference": "spice-server-0:0.12.4-15.el7_2.1.x86_64",
"relates_to_product_reference": "7Client-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-devel-0:0.12.4-15.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64"
},
"product_reference": "spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"relates_to_product_reference": "7Client-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-0:0.12.4-15.el7_2.1.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.2.Z:spice-0:0.12.4-15.el7_2.1.src"
},
"product_reference": "spice-0:0.12.4-15.el7_2.1.src",
"relates_to_product_reference": "7ComputeNode-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64"
},
"product_reference": "spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-0:0.12.4-15.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64"
},
"product_reference": "spice-server-0:0.12.4-15.el7_2.1.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-devel-0:0.12.4-15.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64"
},
"product_reference": "spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-0:0.12.4-15.el7_2.1.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.2.Z:spice-0:0.12.4-15.el7_2.1.src"
},
"product_reference": "spice-0:0.12.4-15.el7_2.1.src",
"relates_to_product_reference": "7Server-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64"
},
"product_reference": "spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"relates_to_product_reference": "7Server-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-0:0.12.4-15.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64"
},
"product_reference": "spice-server-0:0.12.4-15.el7_2.1.x86_64",
"relates_to_product_reference": "7Server-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-devel-0:0.12.4-15.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64"
},
"product_reference": "spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"relates_to_product_reference": "7Server-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-0:0.12.4-15.el7_2.1.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.2.Z:spice-0:0.12.4-15.el7_2.1.src"
},
"product_reference": "spice-0:0.12.4-15.el7_2.1.src",
"relates_to_product_reference": "7Server-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64"
},
"product_reference": "spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"relates_to_product_reference": "7Server-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-0:0.12.4-15.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64"
},
"product_reference": "spice-server-0:0.12.4-15.el7_2.1.x86_64",
"relates_to_product_reference": "7Server-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-devel-0:0.12.4-15.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64"
},
"product_reference": "spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"relates_to_product_reference": "7Server-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-0:0.12.4-15.el7_2.1.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.2.Z:spice-0:0.12.4-15.el7_2.1.src"
},
"product_reference": "spice-0:0.12.4-15.el7_2.1.src",
"relates_to_product_reference": "7Workstation-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64"
},
"product_reference": "spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"relates_to_product_reference": "7Workstation-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-0:0.12.4-15.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64"
},
"product_reference": "spice-server-0:0.12.4-15.el7_2.1.x86_64",
"relates_to_product_reference": "7Workstation-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-devel-0:0.12.4-15.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64"
},
"product_reference": "spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"relates_to_product_reference": "7Workstation-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-0:0.12.4-15.el7_2.1.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.2.Z:spice-0:0.12.4-15.el7_2.1.src"
},
"product_reference": "spice-0:0.12.4-15.el7_2.1.src",
"relates_to_product_reference": "7Workstation-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64"
},
"product_reference": "spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-0:0.12.4-15.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64"
},
"product_reference": "spice-server-0:0.12.4-15.el7_2.1.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-devel-0:0.12.4-15.el7_2.1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64"
},
"product_reference": "spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.2.Z"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Jing Zhao"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2016-0749",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2016-01-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1300646"
}
],
"notes": [
{
"category": "description",
"text": "A memory allocation flaw, leading to a heap-based buffer overflow, was found in spice\u0027s smartcard interaction, which runs under the QEMU-KVM context on the host. A user connecting to a guest VM using spice could potentially use this flaw to crash the QEMU-KVM process or execute arbitrary code with the privileges of the host\u0027s QEMU-KVM process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "spice: heap-based memory corruption within smartcard handling",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Client-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Client-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Client-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Client-optional-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Client-optional-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Client-optional-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Client-optional-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7ComputeNode-optional-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7ComputeNode-optional-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7ComputeNode-optional-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7ComputeNode-optional-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Server-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Server-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Server-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Server-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Server-optional-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Server-optional-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Server-optional-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Server-optional-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Workstation-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-optional-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Workstation-optional-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-optional-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-optional-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0749"
},
{
"category": "external",
"summary": "RHBZ#1300646",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1300646"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0749",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0749"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0749",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0749"
}
],
"release_date": "2016-06-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-06-06T15:55:01+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nApplications acting as a SPICE server must be restarted for this update to take effect. Note that QEMU-KVM guests providing SPICE console access must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Client-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Client-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Client-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Client-optional-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Client-optional-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Client-optional-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Client-optional-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7ComputeNode-optional-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7ComputeNode-optional-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7ComputeNode-optional-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7ComputeNode-optional-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Server-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Server-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Server-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Server-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Server-optional-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Server-optional-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Server-optional-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Server-optional-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Workstation-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-optional-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Workstation-optional-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-optional-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-optional-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1205"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Client-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Client-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Client-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Client-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Client-optional-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Client-optional-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Client-optional-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Client-optional-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7ComputeNode-optional-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7ComputeNode-optional-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7ComputeNode-optional-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7ComputeNode-optional-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Server-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Server-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Server-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Server-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Server-optional-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Server-optional-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Server-optional-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Server-optional-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Workstation-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-optional-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Workstation-optional-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-optional-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-optional-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "spice: heap-based memory corruption within smartcard handling"
},
{
"acknowledgments": [
{
"names": [
"Frediano Ziglio"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2016-2150",
"discovery_date": "2016-02-29T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1313496"
}
],
"notes": [
{
"category": "description",
"text": "A memory access flaw was found in the way spice handled certain guests using crafted primary surface parameters. A user in a guest could use this flaw to read from and write to arbitrary memory locations on the host.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "spice: Host memory access from guest with invalid primary surface parameters",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Client-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Client-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Client-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Client-optional-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Client-optional-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Client-optional-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Client-optional-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7ComputeNode-optional-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7ComputeNode-optional-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7ComputeNode-optional-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7ComputeNode-optional-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Server-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Server-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Server-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Server-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Server-optional-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Server-optional-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Server-optional-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Server-optional-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Workstation-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-optional-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Workstation-optional-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-optional-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-optional-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2150"
},
{
"category": "external",
"summary": "RHBZ#1313496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1313496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2150",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2150"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2150",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2150"
}
],
"release_date": "2016-06-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-06-06T15:55:01+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nApplications acting as a SPICE server must be restarted for this update to take effect. Note that QEMU-KVM guests providing SPICE console access must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Client-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Client-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Client-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Client-optional-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Client-optional-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Client-optional-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Client-optional-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7ComputeNode-optional-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7ComputeNode-optional-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7ComputeNode-optional-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7ComputeNode-optional-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Server-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Server-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Server-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Server-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Server-optional-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Server-optional-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Server-optional-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Server-optional-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Workstation-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-optional-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Workstation-optional-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-optional-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-optional-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1205"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:M/Au:N/C:P/I:N/A:P",
"version": "2.0"
},
"products": [
"7Client-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Client-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Client-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Client-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Client-optional-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Client-optional-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Client-optional-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Client-optional-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7ComputeNode-optional-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7ComputeNode-optional-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7ComputeNode-optional-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7ComputeNode-optional-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Server-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Server-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Server-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Server-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Server-optional-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Server-optional-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Server-optional-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Server-optional-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Workstation-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-optional-7.2.Z:spice-0:0.12.4-15.el7_2.1.src",
"7Workstation-optional-7.2.Z:spice-debuginfo-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-optional-7.2.Z:spice-server-0:0.12.4-15.el7_2.1.x86_64",
"7Workstation-optional-7.2.Z:spice-server-devel-0:0.12.4-15.el7_2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "spice: Host memory access from guest with invalid primary surface parameters"
}
]
}
rhsa-2016:1204
Vulnerability from csaf_redhat
Published
2016-06-06 15:55
Modified
2024-11-22 09:56
Summary
Red Hat Security Advisory: spice-server security update
Notes
Topic
An update for spice-server is now available for Red Hat Enterprise Linux 6.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The Simple Protocol for Independent Computing Environments (SPICE) is a remote display protocol for virtual environments. SPICE users can access a virtualized desktop or server from the local system or any system with network access to the server. SPICE is used in Red Hat Enterprise Linux for viewing virtualized guests running on the Kernel-based Virtual Machine (KVM) hypervisor or on Red Hat Enterprise Virtualization Hypervisors.
Security Fix(es):
* A memory allocation flaw, leading to a heap-based buffer overflow, was found in spice's smartcard interaction, which runs under the QEMU-KVM context on the host. A user connecting to a guest VM using spice could potentially use this flaw to crash the QEMU-KVM process or execute arbitrary code with the privileges of the host's QEMU-KVM process. (CVE-2016-0749)
* A memory access flaw was found in the way spice handled certain guests using crafted primary surface parameters. A user in a guest could use this flaw to read from and write to arbitrary memory locations on the host. (CVE-2016-2150)
The CVE-2016-0749 issue was discovered by Jing Zhao (Red Hat) and the CVE-2016-2150 issue was discovered by Frediano Ziglio (Red Hat).
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for spice-server is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The Simple Protocol for Independent Computing Environments (SPICE) is a remote display protocol for virtual environments. SPICE users can access a virtualized desktop or server from the local system or any system with network access to the server. SPICE is used in Red Hat Enterprise Linux for viewing virtualized guests running on the Kernel-based Virtual Machine (KVM) hypervisor or on Red Hat Enterprise Virtualization Hypervisors.\n\nSecurity Fix(es):\n\n* A memory allocation flaw, leading to a heap-based buffer overflow, was found in spice\u0027s smartcard interaction, which runs under the QEMU-KVM context on the host. A user connecting to a guest VM using spice could potentially use this flaw to crash the QEMU-KVM process or execute arbitrary code with the privileges of the host\u0027s QEMU-KVM process. (CVE-2016-0749)\n\n* A memory access flaw was found in the way spice handled certain guests using crafted primary surface parameters. A user in a guest could use this flaw to read from and write to arbitrary memory locations on the host. (CVE-2016-2150)\n\nThe CVE-2016-0749 issue was discovered by Jing Zhao (Red Hat) and the CVE-2016-2150 issue was discovered by Frediano Ziglio (Red Hat).",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2016:1204",
"url": "https://access.redhat.com/errata/RHSA-2016:1204"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1300646",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1300646"
},
{
"category": "external",
"summary": "1313496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1313496"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1204.json"
}
],
"title": "Red Hat Security Advisory: spice-server security update",
"tracking": {
"current_release_date": "2024-11-22T09:56:15+00:00",
"generator": {
"date": "2024-11-22T09:56:15+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2016:1204",
"initial_release_date": "2016-06-06T15:55:10+00:00",
"revision_history": [
{
"date": "2016-06-06T15:55:10+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2016-06-06T15:55:10+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T09:56:15+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.8.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.8.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.8.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.8.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.8.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.8.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.8.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.8.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "spice-server-0:0.12.4-13.el6.1.src",
"product": {
"name": "spice-server-0:0.12.4-13.el6.1.src",
"product_id": "spice-server-0:0.12.4-13.el6.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spice-server@0.12.4-13.el6.1?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"product": {
"name": "spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"product_id": "spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spice-server-debuginfo@0.12.4-13.el6.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "spice-server-0:0.12.4-13.el6.1.x86_64",
"product": {
"name": "spice-server-0:0.12.4-13.el6.1.x86_64",
"product_id": "spice-server-0:0.12.4-13.el6.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spice-server@0.12.4-13.el6.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"product": {
"name": "spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"product_id": "spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/spice-server-devel@0.12.4-13.el6.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-0:0.12.4-13.el6.1.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.8.z:spice-server-0:0.12.4-13.el6.1.src"
},
"product_reference": "spice-server-0:0.12.4-13.el6.1.src",
"relates_to_product_reference": "6Client-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-0:0.12.4-13.el6.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64"
},
"product_reference": "spice-server-0:0.12.4-13.el6.1.x86_64",
"relates_to_product_reference": "6Client-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64"
},
"product_reference": "spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"relates_to_product_reference": "6Client-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-devel-0:0.12.4-13.el6.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64"
},
"product_reference": "spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"relates_to_product_reference": "6Client-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-0:0.12.4-13.el6.1.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.src"
},
"product_reference": "spice-server-0:0.12.4-13.el6.1.src",
"relates_to_product_reference": "6Client-optional-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-0:0.12.4-13.el6.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64"
},
"product_reference": "spice-server-0:0.12.4-13.el6.1.x86_64",
"relates_to_product_reference": "6Client-optional-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64"
},
"product_reference": "spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"relates_to_product_reference": "6Client-optional-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-devel-0:0.12.4-13.el6.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64"
},
"product_reference": "spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"relates_to_product_reference": "6Client-optional-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-0:0.12.4-13.el6.1.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.8.z:spice-server-0:0.12.4-13.el6.1.src"
},
"product_reference": "spice-server-0:0.12.4-13.el6.1.src",
"relates_to_product_reference": "6ComputeNode-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-0:0.12.4-13.el6.1.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64"
},
"product_reference": "spice-server-0:0.12.4-13.el6.1.x86_64",
"relates_to_product_reference": "6ComputeNode-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64"
},
"product_reference": "spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"relates_to_product_reference": "6ComputeNode-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-devel-0:0.12.4-13.el6.1.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64"
},
"product_reference": "spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"relates_to_product_reference": "6ComputeNode-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-0:0.12.4-13.el6.1.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.src"
},
"product_reference": "spice-server-0:0.12.4-13.el6.1.src",
"relates_to_product_reference": "6ComputeNode-optional-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-0:0.12.4-13.el6.1.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64"
},
"product_reference": "spice-server-0:0.12.4-13.el6.1.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64"
},
"product_reference": "spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-devel-0:0.12.4-13.el6.1.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64"
},
"product_reference": "spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-0:0.12.4-13.el6.1.src as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.8.z:spice-server-0:0.12.4-13.el6.1.src"
},
"product_reference": "spice-server-0:0.12.4-13.el6.1.src",
"relates_to_product_reference": "6Server-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-0:0.12.4-13.el6.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64"
},
"product_reference": "spice-server-0:0.12.4-13.el6.1.x86_64",
"relates_to_product_reference": "6Server-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64"
},
"product_reference": "spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"relates_to_product_reference": "6Server-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-devel-0:0.12.4-13.el6.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64"
},
"product_reference": "spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"relates_to_product_reference": "6Server-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-0:0.12.4-13.el6.1.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.src"
},
"product_reference": "spice-server-0:0.12.4-13.el6.1.src",
"relates_to_product_reference": "6Server-optional-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-0:0.12.4-13.el6.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64"
},
"product_reference": "spice-server-0:0.12.4-13.el6.1.x86_64",
"relates_to_product_reference": "6Server-optional-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64"
},
"product_reference": "spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"relates_to_product_reference": "6Server-optional-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-devel-0:0.12.4-13.el6.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64"
},
"product_reference": "spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"relates_to_product_reference": "6Server-optional-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-0:0.12.4-13.el6.1.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.8.z:spice-server-0:0.12.4-13.el6.1.src"
},
"product_reference": "spice-server-0:0.12.4-13.el6.1.src",
"relates_to_product_reference": "6Workstation-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-0:0.12.4-13.el6.1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64"
},
"product_reference": "spice-server-0:0.12.4-13.el6.1.x86_64",
"relates_to_product_reference": "6Workstation-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64"
},
"product_reference": "spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"relates_to_product_reference": "6Workstation-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-devel-0:0.12.4-13.el6.1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64"
},
"product_reference": "spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"relates_to_product_reference": "6Workstation-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-0:0.12.4-13.el6.1.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.src"
},
"product_reference": "spice-server-0:0.12.4-13.el6.1.src",
"relates_to_product_reference": "6Workstation-optional-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-0:0.12.4-13.el6.1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64"
},
"product_reference": "spice-server-0:0.12.4-13.el6.1.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64"
},
"product_reference": "spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-server-devel-0:0.12.4-13.el6.1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64"
},
"product_reference": "spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.8.z"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Jing Zhao"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2016-0749",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2016-01-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1300646"
}
],
"notes": [
{
"category": "description",
"text": "A memory allocation flaw, leading to a heap-based buffer overflow, was found in spice\u0027s smartcard interaction, which runs under the QEMU-KVM context on the host. A user connecting to a guest VM using spice could potentially use this flaw to crash the QEMU-KVM process or execute arbitrary code with the privileges of the host\u0027s QEMU-KVM process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "spice: heap-based memory corruption within smartcard handling",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Client-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Client-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Client-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Client-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Client-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Client-optional-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Client-optional-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6ComputeNode-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6ComputeNode-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-optional-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-optional-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Server-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Server-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Server-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Server-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Server-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Server-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Server-optional-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Server-optional-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Workstation-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Workstation-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Workstation-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Workstation-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Workstation-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Workstation-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Workstation-optional-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Workstation-optional-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0749"
},
{
"category": "external",
"summary": "RHBZ#1300646",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1300646"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0749",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0749"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0749",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0749"
}
],
"release_date": "2016-06-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-06-06T15:55:10+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nApplications acting as a SPICE server must be restarted for this update to take effect. Note that QEMU-KVM guests providing SPICE console access must be restarted for this update to take effect.",
"product_ids": [
"6Client-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Client-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Client-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Client-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Client-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Client-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Client-optional-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Client-optional-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6ComputeNode-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6ComputeNode-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-optional-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-optional-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Server-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Server-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Server-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Server-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Server-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Server-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Server-optional-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Server-optional-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Workstation-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Workstation-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Workstation-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Workstation-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Workstation-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Workstation-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Workstation-optional-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Workstation-optional-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1204"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Client-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Client-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Client-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Client-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Client-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Client-optional-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Client-optional-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6ComputeNode-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6ComputeNode-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-optional-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-optional-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Server-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Server-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Server-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Server-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Server-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Server-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Server-optional-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Server-optional-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Workstation-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Workstation-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Workstation-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Workstation-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Workstation-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Workstation-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Workstation-optional-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Workstation-optional-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "spice: heap-based memory corruption within smartcard handling"
},
{
"acknowledgments": [
{
"names": [
"Frediano Ziglio"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2016-2150",
"discovery_date": "2016-02-29T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1313496"
}
],
"notes": [
{
"category": "description",
"text": "A memory access flaw was found in the way spice handled certain guests using crafted primary surface parameters. A user in a guest could use this flaw to read from and write to arbitrary memory locations on the host.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "spice: Host memory access from guest with invalid primary surface parameters",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Client-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Client-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Client-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Client-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Client-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Client-optional-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Client-optional-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6ComputeNode-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6ComputeNode-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-optional-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-optional-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Server-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Server-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Server-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Server-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Server-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Server-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Server-optional-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Server-optional-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Workstation-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Workstation-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Workstation-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Workstation-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Workstation-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Workstation-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Workstation-optional-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Workstation-optional-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2150"
},
{
"category": "external",
"summary": "RHBZ#1313496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1313496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2150",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2150"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2150",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2150"
}
],
"release_date": "2016-06-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-06-06T15:55:10+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nApplications acting as a SPICE server must be restarted for this update to take effect. Note that QEMU-KVM guests providing SPICE console access must be restarted for this update to take effect.",
"product_ids": [
"6Client-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Client-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Client-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Client-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Client-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Client-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Client-optional-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Client-optional-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6ComputeNode-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6ComputeNode-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-optional-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-optional-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Server-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Server-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Server-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Server-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Server-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Server-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Server-optional-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Server-optional-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Workstation-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Workstation-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Workstation-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Workstation-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Workstation-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Workstation-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Workstation-optional-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Workstation-optional-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1204"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:M/Au:N/C:P/I:N/A:P",
"version": "2.0"
},
"products": [
"6Client-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Client-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Client-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Client-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Client-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Client-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Client-optional-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Client-optional-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6ComputeNode-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6ComputeNode-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-optional-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6ComputeNode-optional-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Server-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Server-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Server-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Server-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Server-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Server-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Server-optional-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Server-optional-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Workstation-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Workstation-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Workstation-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Workstation-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64",
"6Workstation-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.src",
"6Workstation-optional-6.8.z:spice-server-0:0.12.4-13.el6.1.x86_64",
"6Workstation-optional-6.8.z:spice-server-debuginfo-0:0.12.4-13.el6.1.x86_64",
"6Workstation-optional-6.8.z:spice-server-devel-0:0.12.4-13.el6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "spice: Host memory access from guest with invalid primary surface parameters"
}
]
}
ghsa-jvcp-p6pm-47gg
Vulnerability from github
Published
2022-05-14 01:08
Modified
2022-05-14 01:08
Severity ?
VLAI Severity ?
Details
The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.
{
"affected": [],
"aliases": [
"CVE-2016-0749"
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2016-06-09T16:59:00Z",
"severity": "CRITICAL"
},
"details": "The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.",
"id": "GHSA-jvcp-p6pm-47gg",
"modified": "2022-05-14T01:08:59Z",
"published": "2022-05-14T01:08:59Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0749"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2016:1204"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2016:1205"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2016-0749"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1300646"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/201606-05"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-updates/2016-07/msg00003.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-updates/2016-07/msg00004.html"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2016/dsa-3596"
},
{
"type": "WEB",
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/USN-3014-1"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
opensuse-su-2024:10393-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
libspice-server-devel-0.12.8-2.1 on GA media
Notes
Title of the patch
libspice-server-devel-0.12.8-2.1 on GA media
Description of the patch
These are all security issues fixed in the libspice-server-devel-0.12.8-2.1 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-10393
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "libspice-server-devel-0.12.8-2.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the libspice-server-devel-0.12.8-2.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-10393",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10393-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-3247 page",
"url": "https://www.suse.com/security/cve/CVE-2015-3247/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5260 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5260/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5261 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5261/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0749 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0749/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2150 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2150/"
}
],
"title": "libspice-server-devel-0.12.8-2.1 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:10393-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libspice-server-devel-0.12.8-2.1.aarch64",
"product": {
"name": "libspice-server-devel-0.12.8-2.1.aarch64",
"product_id": "libspice-server-devel-0.12.8-2.1.aarch64"
}
},
{
"category": "product_version",
"name": "libspice-server1-0.12.8-2.1.aarch64",
"product": {
"name": "libspice-server1-0.12.8-2.1.aarch64",
"product_id": "libspice-server1-0.12.8-2.1.aarch64"
}
},
{
"category": "product_version",
"name": "spice-client-0.12.8-2.1.aarch64",
"product": {
"name": "spice-client-0.12.8-2.1.aarch64",
"product_id": "spice-client-0.12.8-2.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libspice-server-devel-0.12.8-2.1.ppc64le",
"product": {
"name": "libspice-server-devel-0.12.8-2.1.ppc64le",
"product_id": "libspice-server-devel-0.12.8-2.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libspice-server1-0.12.8-2.1.ppc64le",
"product": {
"name": "libspice-server1-0.12.8-2.1.ppc64le",
"product_id": "libspice-server1-0.12.8-2.1.ppc64le"
}
},
{
"category": "product_version",
"name": "spice-client-0.12.8-2.1.ppc64le",
"product": {
"name": "spice-client-0.12.8-2.1.ppc64le",
"product_id": "spice-client-0.12.8-2.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libspice-server-devel-0.12.8-2.1.s390x",
"product": {
"name": "libspice-server-devel-0.12.8-2.1.s390x",
"product_id": "libspice-server-devel-0.12.8-2.1.s390x"
}
},
{
"category": "product_version",
"name": "libspice-server1-0.12.8-2.1.s390x",
"product": {
"name": "libspice-server1-0.12.8-2.1.s390x",
"product_id": "libspice-server1-0.12.8-2.1.s390x"
}
},
{
"category": "product_version",
"name": "spice-client-0.12.8-2.1.s390x",
"product": {
"name": "spice-client-0.12.8-2.1.s390x",
"product_id": "spice-client-0.12.8-2.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libspice-server-devel-0.12.8-2.1.x86_64",
"product": {
"name": "libspice-server-devel-0.12.8-2.1.x86_64",
"product_id": "libspice-server-devel-0.12.8-2.1.x86_64"
}
},
{
"category": "product_version",
"name": "libspice-server1-0.12.8-2.1.x86_64",
"product": {
"name": "libspice-server1-0.12.8-2.1.x86_64",
"product_id": "libspice-server1-0.12.8-2.1.x86_64"
}
},
{
"category": "product_version",
"name": "spice-client-0.12.8-2.1.x86_64",
"product": {
"name": "spice-client-0.12.8-2.1.x86_64",
"product_id": "spice-client-0.12.8-2.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libspice-server-devel-0.12.8-2.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.aarch64"
},
"product_reference": "libspice-server-devel-0.12.8-2.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libspice-server-devel-0.12.8-2.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.ppc64le"
},
"product_reference": "libspice-server-devel-0.12.8-2.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libspice-server-devel-0.12.8-2.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.s390x"
},
"product_reference": "libspice-server-devel-0.12.8-2.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libspice-server-devel-0.12.8-2.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.x86_64"
},
"product_reference": "libspice-server-devel-0.12.8-2.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libspice-server1-0.12.8-2.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.aarch64"
},
"product_reference": "libspice-server1-0.12.8-2.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libspice-server1-0.12.8-2.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.ppc64le"
},
"product_reference": "libspice-server1-0.12.8-2.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libspice-server1-0.12.8-2.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.s390x"
},
"product_reference": "libspice-server1-0.12.8-2.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libspice-server1-0.12.8-2.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.x86_64"
},
"product_reference": "libspice-server1-0.12.8-2.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-client-0.12.8-2.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:spice-client-0.12.8-2.1.aarch64"
},
"product_reference": "spice-client-0.12.8-2.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-client-0.12.8-2.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:spice-client-0.12.8-2.1.ppc64le"
},
"product_reference": "spice-client-0.12.8-2.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-client-0.12.8-2.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:spice-client-0.12.8-2.1.s390x"
},
"product_reference": "spice-client-0.12.8-2.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spice-client-0.12.8-2.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:spice-client-0.12.8-2.1.x86_64"
},
"product_reference": "spice-client-0.12.8-2.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-3247",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-3247"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in the worker_update_monitors_config function in SPICE 0.12.4 allows a remote authenticated guest user to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arbitrary code on the host via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-3247",
"url": "https://www.suse.com/security/cve/CVE-2015-3247"
},
{
"category": "external",
"summary": "SUSE Bug 944460 for CVE-2015-3247",
"url": "https://bugzilla.suse.com/944460"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-3247"
},
{
"cve": "CVE-2015-5260",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5260"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arbitrary code on the host via QXL commands related to the surface_id parameter.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5260",
"url": "https://www.suse.com/security/cve/CVE-2015-5260"
},
{
"category": "external",
"summary": "SUSE Bug 944787 for CVE-2015-5260",
"url": "https://bugzilla.suse.com/944787"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-5260"
},
{
"cve": "CVE-2015-5261",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5261"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5261",
"url": "https://www.suse.com/security/cve/CVE-2015-5261"
},
{
"category": "external",
"summary": "SUSE Bug 948976 for CVE-2015-5261",
"url": "https://bugzilla.suse.com/948976"
},
{
"category": "external",
"summary": "SUSE Bug 982386 for CVE-2015-5261",
"url": "https://bugzilla.suse.com/982386"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-5261"
},
{
"cve": "CVE-2016-0749",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0749"
}
],
"notes": [
{
"category": "general",
"text": "The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0749",
"url": "https://www.suse.com/security/cve/CVE-2016-0749"
},
{
"category": "external",
"summary": "SUSE Bug 982385 for CVE-2016-0749",
"url": "https://bugzilla.suse.com/982385"
},
{
"category": "external",
"summary": "SUSE Bug 982386 for CVE-2016-0749",
"url": "https://bugzilla.suse.com/982386"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-0749"
},
{
"cve": "CVE-2016-2150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2150"
}
],
"notes": [
{
"category": "general",
"text": "SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters, a similar issue to CVE-2015-5261.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2150",
"url": "https://www.suse.com/security/cve/CVE-2016-2150"
},
{
"category": "external",
"summary": "SUSE Bug 982385 for CVE-2016-2150",
"url": "https://bugzilla.suse.com/982385"
},
{
"category": "external",
"summary": "SUSE Bug 982386 for CVE-2016-2150",
"url": "https://bugzilla.suse.com/982386"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server-devel-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:libspice-server1-0.12.8-2.1.x86_64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.aarch64",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.ppc64le",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.s390x",
"openSUSE Tumbleweed:spice-client-0.12.8-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-2150"
}
]
}
fkie_cve-2016-0749
Vulnerability from fkie_nvd
Published
2016-06-09 16:59
Modified
2025-04-12 10:46
Severity ?
Summary
The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.
References
| ▶ | URL | Tags | |
|---|---|---|---|
| secalert@redhat.com | http://lists.opensuse.org/opensuse-updates/2016-07/msg00003.html | ||
| secalert@redhat.com | http://lists.opensuse.org/opensuse-updates/2016-07/msg00004.html | ||
| secalert@redhat.com | http://www.debian.org/security/2016/dsa-3596 | ||
| secalert@redhat.com | http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html | ||
| secalert@redhat.com | http://www.ubuntu.com/usn/USN-3014-1 | ||
| secalert@redhat.com | https://access.redhat.com/errata/RHSA-2016:1204 | ||
| secalert@redhat.com | https://access.redhat.com/errata/RHSA-2016:1205 | ||
| secalert@redhat.com | https://security.gentoo.org/glsa/201606-05 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-updates/2016-07/msg00003.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-updates/2016-07/msg00004.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.debian.org/security/2016/dsa-3596 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.ubuntu.com/usn/USN-3014-1 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2016:1204 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2016:1205 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://security.gentoo.org/glsa/201606-05 |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| opensuse | leap | 42.1 | |
| opensuse | opensuse | 13.2 | |
| debian | debian_linux | 8.0 | |
| redhat | enterprise_linux | 6.0 | |
| redhat | enterprise_linux | 6.0 | |
| redhat | enterprise_linux_desktop | 6.0 | |
| redhat | enterprise_linux_server | 6.0 | |
| redhat | enterprise_linux_workstation | 6.0 | |
| microsoft | windows | * | |
| redhat | enterprise_linux | 7.0 | |
| redhat | enterprise_linux | 7.0 | |
| redhat | enterprise_linux_desktop | 7.0 | |
| redhat | enterprise_linux_hpc_node_eus | 7.2 | |
| redhat | enterprise_linux_server | 7.0 | |
| redhat | enterprise_linux_server_aus | 7.2 | |
| redhat | enterprise_linux_server_eus | 7.2 | |
| redhat | enterprise_linux_workstation | 7.0 | |
| microsoft | windows | * | |
| spice_project | spice | - |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*",
"matchCriteriaId": "4863BE36-D16A-4D75-90D9-FD76DB5B48B7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",
"matchCriteriaId": "03117DF1-3BEC-4B8D-AD63-DBBDB2126081",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:scientific_computing:*:*:*",
"matchCriteriaId": "EE7A63D3-B604-436A-8BB3-DBD820FEFAD7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "9BBCD86A-E6C7-4444-9D74-F861084090F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E5ED5807-55B7-47C5-97A6-03233F4FBC3A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "142AD0DD-4CF3-4D74-9442-459CE3347E3A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:scientific_computing:*:*:*",
"matchCriteriaId": "3613D314-10A7-45B2-A43B-9052E9901F3B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "33C068A4-3780-4EAB-A937-6082DF847564",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*",
"matchCriteriaId": "39A901D6-0874-46A4-92A8-5F72C7A89E85",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "51EF4996-72F4-4FA4-814F-F5991E7A8318",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*",
"matchCriteriaId": "1C8D871B-AEA1-4407-AEE3-47EC782250FF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*",
"matchCriteriaId": "44B067C7-735E-43C9-9188-7E1522A02491",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "825ECE2D-E232-46E0-A047-074B34DB1E97",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:spice_project:spice:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2285AB1B-2918-4DC6-B9E6-30BD9A52ADD4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow."
},
{
"lang": "es",
"value": "La interacci\u00f3n smartcard en SPICE permite a atacantes remotos provocar un denegaci\u00f3n de servicio (ca\u00edda del proceso QEMU-KVM) o ejecutar, posiblemente, un c\u00f3digo arbitrario a trav\u00e9s de v\u00e9ctores relacionados con conectarse con un invitado VM, lo que ejecuta un desbordamiento de bufer basado en memoria din\u00e1mica."
}
],
"id": "CVE-2016-0749",
"lastModified": "2025-04-12T10:46:40.837",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2016-06-09T16:59:00.127",
"references": [
{
"source": "secalert@redhat.com",
"url": "http://lists.opensuse.org/opensuse-updates/2016-07/msg00003.html"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.opensuse.org/opensuse-updates/2016-07/msg00004.html"
},
{
"source": "secalert@redhat.com",
"url": "http://www.debian.org/security/2016/dsa-3596"
},
{
"source": "secalert@redhat.com",
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
},
{
"source": "secalert@redhat.com",
"url": "http://www.ubuntu.com/usn/USN-3014-1"
},
{
"source": "secalert@redhat.com",
"url": "https://access.redhat.com/errata/RHSA-2016:1204"
},
{
"source": "secalert@redhat.com",
"url": "https://access.redhat.com/errata/RHSA-2016:1205"
},
{
"source": "secalert@redhat.com",
"url": "https://security.gentoo.org/glsa/201606-05"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-updates/2016-07/msg00003.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-updates/2016-07/msg00004.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.debian.org/security/2016/dsa-3596"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.ubuntu.com/usn/USN-3014-1"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://access.redhat.com/errata/RHSA-2016:1204"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://access.redhat.com/errata/RHSA-2016:1205"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://security.gentoo.org/glsa/201606-05"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-119"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
gsd-2016-0749
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2016-0749",
"description": "The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.",
"id": "GSD-2016-0749",
"references": [
"https://www.suse.com/security/cve/CVE-2016-0749.html",
"https://www.debian.org/security/2016/dsa-3596",
"https://access.redhat.com/errata/RHSA-2016:1205",
"https://access.redhat.com/errata/RHSA-2016:1204",
"https://ubuntu.com/security/CVE-2016-0749",
"https://advisories.mageia.org/CVE-2016-0749.html",
"https://linux.oracle.com/cve/CVE-2016-0749.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2016-0749"
],
"details": "The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.",
"id": "GSD-2016-0749",
"modified": "2023-12-13T01:21:17.878797Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2016-0749",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
"refsource": "MISC",
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
},
{
"name": "https://security.gentoo.org/glsa/201606-05",
"refsource": "MISC",
"url": "https://security.gentoo.org/glsa/201606-05"
},
{
"name": "http://lists.opensuse.org/opensuse-updates/2016-07/msg00003.html",
"refsource": "MISC",
"url": "http://lists.opensuse.org/opensuse-updates/2016-07/msg00003.html"
},
{
"name": "http://lists.opensuse.org/opensuse-updates/2016-07/msg00004.html",
"refsource": "MISC",
"url": "http://lists.opensuse.org/opensuse-updates/2016-07/msg00004.html"
},
{
"name": "http://www.debian.org/security/2016/dsa-3596",
"refsource": "MISC",
"url": "http://www.debian.org/security/2016/dsa-3596"
},
{
"name": "http://www.ubuntu.com/usn/USN-3014-1",
"refsource": "MISC",
"url": "http://www.ubuntu.com/usn/USN-3014-1"
},
{
"name": "https://access.redhat.com/errata/RHSA-2016:1204",
"refsource": "MISC",
"url": "https://access.redhat.com/errata/RHSA-2016:1204"
},
{
"name": "https://access.redhat.com/errata/RHSA-2016:1205",
"refsource": "MISC",
"url": "https://access.redhat.com/errata/RHSA-2016:1205"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:scientific_computing:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:scientific_computing:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:spice_project:spice:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2016-0749"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "DSA-3596",
"refsource": "DEBIAN",
"tags": [],
"url": "http://www.debian.org/security/2016/dsa-3596"
},
{
"name": "RHSA-2016:1205",
"refsource": "REDHAT",
"tags": [],
"url": "https://access.redhat.com/errata/RHSA-2016:1205"
},
{
"name": "RHSA-2016:1204",
"refsource": "REDHAT",
"tags": [],
"url": "https://access.redhat.com/errata/RHSA-2016:1204"
},
{
"name": "openSUSE-SU-2016:1725",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-updates/2016-07/msg00003.html"
},
{
"name": "openSUSE-SU-2016:1726",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-updates/2016-07/msg00004.html"
},
{
"name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
"refsource": "CONFIRM",
"tags": [],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
},
{
"name": "USN-3014-1",
"refsource": "UBUNTU",
"tags": [],
"url": "http://www.ubuntu.com/usn/USN-3014-1"
},
{
"name": "GLSA-201606-05",
"refsource": "GENTOO",
"tags": [],
"url": "https://security.gentoo.org/glsa/201606-05"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
},
"lastModifiedDate": "2023-02-12T23:16Z",
"publishedDate": "2016-06-09T16:59Z"
}
}
}
suse-su-2016:1561-1
Vulnerability from csaf_suse
Published
2016-06-13 11:42
Modified
2016-06-13 11:42
Summary
Security update for spice
Notes
Title of the patch
Security update for spice
Description of the patch
spice was updated to fix two security issues.
These security issues were fixed:
- CVE-2016-2150: Guest escape using crafted primary surface parameters (bsc#982386).
- CVE-2016-0749: Heap-based buffer overflow in smartcard interaction (bsc#982385).
Patchnames
SUSE-SLE-DESKTOP-12-2016-928,SUSE-SLE-SDK-12-2016-928,SUSE-SLE-SERVER-12-2016-928
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for spice",
"title": "Title of the patch"
},
{
"category": "description",
"text": "spice was updated to fix two security issues.\n\nThese security issues were fixed:\n- CVE-2016-2150: Guest escape using crafted primary surface parameters (bsc#982386).\n- CVE-2016-0749: Heap-based buffer overflow in smartcard interaction (bsc#982385).\n ",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-DESKTOP-12-2016-928,SUSE-SLE-SDK-12-2016-928,SUSE-SLE-SERVER-12-2016-928",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_1561-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2016:1561-1",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20161561-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2016:1561-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2016-June/002110.html"
},
{
"category": "self",
"summary": "SUSE Bug 982385",
"url": "https://bugzilla.suse.com/982385"
},
{
"category": "self",
"summary": "SUSE Bug 982386",
"url": "https://bugzilla.suse.com/982386"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0749 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0749/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2150 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2150/"
}
],
"title": "Security update for spice",
"tracking": {
"current_release_date": "2016-06-13T11:42:43Z",
"generator": {
"date": "2016-06-13T11:42:43Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2016:1561-1",
"initial_release_date": "2016-06-13T11:42:43Z",
"revision_history": [
{
"date": "2016-06-13T11:42:43Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libspice-server1-0.12.4-8.9.1.x86_64",
"product": {
"name": "libspice-server1-0.12.4-8.9.1.x86_64",
"product_id": "libspice-server1-0.12.4-8.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libspice-server-devel-0.12.4-8.9.1.x86_64",
"product": {
"name": "libspice-server-devel-0.12.4-8.9.1.x86_64",
"product_id": "libspice-server-devel-0.12.4-8.9.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12",
"product": {
"name": "SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12",
"product_id": "SUSE Linux Enterprise Software Development Kit 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12",
"product": {
"name": "SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libspice-server1-0.12.4-8.9.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:libspice-server1-0.12.4-8.9.1.x86_64"
},
"product_reference": "libspice-server1-0.12.4-8.9.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libspice-server-devel-0.12.4-8.9.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12",
"product_id": "SUSE Linux Enterprise Software Development Kit 12:libspice-server-devel-0.12.4-8.9.1.x86_64"
},
"product_reference": "libspice-server-devel-0.12.4-8.9.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libspice-server1-0.12.4-8.9.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:libspice-server1-0.12.4-8.9.1.x86_64"
},
"product_reference": "libspice-server1-0.12.4-8.9.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libspice-server1-0.12.4-8.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libspice-server1-0.12.4-8.9.1.x86_64"
},
"product_reference": "libspice-server1-0.12.4-8.9.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-0749",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0749"
}
],
"notes": [
{
"category": "general",
"text": "The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:libspice-server1-0.12.4-8.9.1.x86_64",
"SUSE Linux Enterprise Server 12:libspice-server1-0.12.4-8.9.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libspice-server1-0.12.4-8.9.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:libspice-server-devel-0.12.4-8.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0749",
"url": "https://www.suse.com/security/cve/CVE-2016-0749"
},
{
"category": "external",
"summary": "SUSE Bug 982385 for CVE-2016-0749",
"url": "https://bugzilla.suse.com/982385"
},
{
"category": "external",
"summary": "SUSE Bug 982386 for CVE-2016-0749",
"url": "https://bugzilla.suse.com/982386"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:libspice-server1-0.12.4-8.9.1.x86_64",
"SUSE Linux Enterprise Server 12:libspice-server1-0.12.4-8.9.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libspice-server1-0.12.4-8.9.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:libspice-server-devel-0.12.4-8.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:libspice-server1-0.12.4-8.9.1.x86_64",
"SUSE Linux Enterprise Server 12:libspice-server1-0.12.4-8.9.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libspice-server1-0.12.4-8.9.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:libspice-server-devel-0.12.4-8.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T11:42:43Z",
"details": "important"
}
],
"title": "CVE-2016-0749"
},
{
"cve": "CVE-2016-2150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2150"
}
],
"notes": [
{
"category": "general",
"text": "SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters, a similar issue to CVE-2015-5261.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:libspice-server1-0.12.4-8.9.1.x86_64",
"SUSE Linux Enterprise Server 12:libspice-server1-0.12.4-8.9.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libspice-server1-0.12.4-8.9.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:libspice-server-devel-0.12.4-8.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2150",
"url": "https://www.suse.com/security/cve/CVE-2016-2150"
},
{
"category": "external",
"summary": "SUSE Bug 982385 for CVE-2016-2150",
"url": "https://bugzilla.suse.com/982385"
},
{
"category": "external",
"summary": "SUSE Bug 982386 for CVE-2016-2150",
"url": "https://bugzilla.suse.com/982386"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:libspice-server1-0.12.4-8.9.1.x86_64",
"SUSE Linux Enterprise Server 12:libspice-server1-0.12.4-8.9.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libspice-server1-0.12.4-8.9.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:libspice-server-devel-0.12.4-8.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:libspice-server1-0.12.4-8.9.1.x86_64",
"SUSE Linux Enterprise Server 12:libspice-server1-0.12.4-8.9.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libspice-server1-0.12.4-8.9.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:libspice-server-devel-0.12.4-8.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T11:42:43Z",
"details": "important"
}
],
"title": "CVE-2016-2150"
}
]
}
suse-su-2016:1559-1
Vulnerability from csaf_suse
Published
2016-06-13 07:16
Modified
2016-06-13 07:16
Summary
Security update for spice
Notes
Title of the patch
Security update for spice
Description of the patch
spice was updated to fix four security issues.
These security issues were fixed:
- CVE-2016-2150: Guest escape using crafted primary surface parameters (bsc#982386).
- CVE-2016-0749: Heap-based buffer overflow in smartcard interaction (bsc#982385).
- CVE-2015-5260: Insufficient validation of surface_id parameter could have caused a crash (bsc#944787).
- CVE-2015-5261: Host memory access from guest using crafted images (bsc#948976).
Patchnames
SUSE-SLE-DESKTOP-12-SP1-2016-925,SUSE-SLE-SDK-12-SP1-2016-925,SUSE-SLE-SERVER-12-SP1-2016-925
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for spice",
"title": "Title of the patch"
},
{
"category": "description",
"text": "spice was updated to fix four security issues.\n\nThese security issues were fixed:\n- CVE-2016-2150: Guest escape using crafted primary surface parameters (bsc#982386).\n- CVE-2016-0749: Heap-based buffer overflow in smartcard interaction (bsc#982385).\n- CVE-2015-5260: Insufficient validation of surface_id parameter could have caused a crash (bsc#944787).\n- CVE-2015-5261: Host memory access from guest using crafted images (bsc#948976).\n ",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-DESKTOP-12-SP1-2016-925,SUSE-SLE-SDK-12-SP1-2016-925,SUSE-SLE-SERVER-12-SP1-2016-925",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_1559-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2016:1559-1",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20161559-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2016:1559-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2016-June/002108.html"
},
{
"category": "self",
"summary": "SUSE Bug 944787",
"url": "https://bugzilla.suse.com/944787"
},
{
"category": "self",
"summary": "SUSE Bug 948976",
"url": "https://bugzilla.suse.com/948976"
},
{
"category": "self",
"summary": "SUSE Bug 982385",
"url": "https://bugzilla.suse.com/982385"
},
{
"category": "self",
"summary": "SUSE Bug 982386",
"url": "https://bugzilla.suse.com/982386"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5260 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5260/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5261 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5261/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0749 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0749/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2150 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2150/"
}
],
"title": "Security update for spice",
"tracking": {
"current_release_date": "2016-06-13T07:16:48Z",
"generator": {
"date": "2016-06-13T07:16:48Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2016:1559-1",
"initial_release_date": "2016-06-13T07:16:48Z",
"revision_history": [
{
"date": "2016-06-13T07:16:48Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libspice-server1-0.12.5-4.1.x86_64",
"product": {
"name": "libspice-server1-0.12.5-4.1.x86_64",
"product_id": "libspice-server1-0.12.5-4.1.x86_64"
}
},
{
"category": "product_version",
"name": "libspice-server-devel-0.12.5-4.1.x86_64",
"product": {
"name": "libspice-server-devel-0.12.5-4.1.x86_64",
"product_id": "libspice-server-devel-0.12.5-4.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libspice-server1-0.12.5-4.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:libspice-server1-0.12.5-4.1.x86_64"
},
"product_reference": "libspice-server1-0.12.5-4.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libspice-server-devel-0.12.5-4.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:libspice-server-devel-0.12.5-4.1.x86_64"
},
"product_reference": "libspice-server-devel-0.12.5-4.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libspice-server1-0.12.5-4.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:libspice-server1-0.12.5-4.1.x86_64"
},
"product_reference": "libspice-server1-0.12.5-4.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libspice-server1-0.12.5-4.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libspice-server1-0.12.5-4.1.x86_64"
},
"product_reference": "libspice-server1-0.12.5-4.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-5260",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5260"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arbitrary code on the host via QXL commands related to the surface_id parameter.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libspice-server-devel-0.12.5-4.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5260",
"url": "https://www.suse.com/security/cve/CVE-2015-5260"
},
{
"category": "external",
"summary": "SUSE Bug 944787 for CVE-2015-5260",
"url": "https://bugzilla.suse.com/944787"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libspice-server-devel-0.12.5-4.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libspice-server-devel-0.12.5-4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:16:48Z",
"details": "important"
}
],
"title": "CVE-2015-5260"
},
{
"cve": "CVE-2015-5261",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5261"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libspice-server-devel-0.12.5-4.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5261",
"url": "https://www.suse.com/security/cve/CVE-2015-5261"
},
{
"category": "external",
"summary": "SUSE Bug 948976 for CVE-2015-5261",
"url": "https://bugzilla.suse.com/948976"
},
{
"category": "external",
"summary": "SUSE Bug 982386 for CVE-2015-5261",
"url": "https://bugzilla.suse.com/982386"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libspice-server-devel-0.12.5-4.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libspice-server-devel-0.12.5-4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:16:48Z",
"details": "important"
}
],
"title": "CVE-2015-5261"
},
{
"cve": "CVE-2016-0749",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0749"
}
],
"notes": [
{
"category": "general",
"text": "The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libspice-server-devel-0.12.5-4.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0749",
"url": "https://www.suse.com/security/cve/CVE-2016-0749"
},
{
"category": "external",
"summary": "SUSE Bug 982385 for CVE-2016-0749",
"url": "https://bugzilla.suse.com/982385"
},
{
"category": "external",
"summary": "SUSE Bug 982386 for CVE-2016-0749",
"url": "https://bugzilla.suse.com/982386"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libspice-server-devel-0.12.5-4.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libspice-server-devel-0.12.5-4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:16:48Z",
"details": "important"
}
],
"title": "CVE-2016-0749"
},
{
"cve": "CVE-2016-2150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2150"
}
],
"notes": [
{
"category": "general",
"text": "SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters, a similar issue to CVE-2015-5261.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libspice-server-devel-0.12.5-4.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2150",
"url": "https://www.suse.com/security/cve/CVE-2016-2150"
},
{
"category": "external",
"summary": "SUSE Bug 982385 for CVE-2016-2150",
"url": "https://bugzilla.suse.com/982385"
},
{
"category": "external",
"summary": "SUSE Bug 982386 for CVE-2016-2150",
"url": "https://bugzilla.suse.com/982386"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libspice-server-devel-0.12.5-4.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libspice-server1-0.12.5-4.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libspice-server-devel-0.12.5-4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:16:48Z",
"details": "important"
}
],
"title": "CVE-2016-2150"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…