PT-2016-4401 · Red Hat+3 · Spice+4

Jing Zhao · Publicado 2016-06-06 · Atualizado 2024-06-15 · CVE-2016-0749

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SPICE (affected versions not specified)

Description The issue is related to the smartcard interaction in SPICE, which allows remote attackers to cause a denial of service, potentially leading to a QEMU-KVM process crash, or possibly execute arbitrary code. This is triggered by vectors related to connecting to a guest VM, resulting in a heap-based buffer overflow.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CESA-2016_1204

CESA-2016_1205

CVE-2016-0749

DSA-3596-1

MGASA-2016-0250

OPENSUSE-SU-2024:10393-1

RHSA-2016:1204

RHSA-2016:1205

RHSA-2016_1204

RHSA-2016_1205

SUSE-SU-2016:1559-1

SUSE-SU-2016:1561-1

SUSE-SU-2016_1561-1

USN-3014-1

Produtos afetados

Centos

Red Hat

Spice

Suse

Ubuntu

Referências · 37

• https://ubuntu.com/security/notices/USN-3014-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-5261 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2016:1559-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2016-0250 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:10393-1 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-updates/2016-07/msg00004.html · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2016:1561-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/DSA-3596-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-0749 · Aviso do Fabricante
• https://bugzilla.suse.com/948976 · Nota
• https://access.redhat.com/errata/RHSA-2016:1204 · Aviso do Fabricante
• https://bugzilla.suse.com/944787 · Nota
• https://security.gentoo.org/glsa/201606-05 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2016/suse-su-20161561-1 · Nota
• https://suse.com/security/cve/CVE-2016-0749 · Nota