PT-2016-5030 · Red Hat+3 · Spice+4

Adam Mariš · Publicado 2016-06-06 · Atualizado 2024-06-15 · CVE-2016-2150

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions SPICE (affected versions not specified)

Description The issue allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters. This is similar to a previously known issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CESA-2016_1204

CESA-2016_1205

CVE-2016-2150

DLA-531-1

DSA-3596-1

MGASA-2016-0250

OPENSUSE-SU-2024:10393-1

RHSA-2016:1204

RHSA-2016:1205

RHSA-2016_1204

RHSA-2016_1205

SUSE-SU-2016:1559-1

SUSE-SU-2016:1561-1

SUSE-SU-2021:14744-1

SUSE-SU-2021_14744-1

USN-3014-1

Produtos afetados

Centos

Red Hat

Spice

Suse

Ubuntu

Referências · 44

• https://suse.com/security/cve/CVE-2021-20201 · Nota
• https://suse.com/support/update/announcement/2021/suse-su-202114744-1 · Nota
• https://suse.com/security/cve/CVE-2015-5261 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2016:1559-1 · Aviso do Fabricante
• https://bugzilla.suse.com/1181686 · Nota
• https://osv.dev/vulnerability/MGASA-2016-0250 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:10393-1 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-updates/2016-07/msg00004.html · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2016:1561-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/DSA-3596-1 · Aviso do Fabricante
• https://bugzilla.suse.com/948976 · Nota
• https://security-tracker.debian.org/tracker/CVE-2016-2150 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2016:1204 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1313496 · Nota
• https://bugzilla.suse.com/944787 · Nota