PT-2016-4401 · Red Hat+3 · Spice+4

Jing Zhao · Published 2016-06-06 · Updated 2024-06-15 · CVE-2016-0749

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SPICE (affected versions not specified)

Description The issue is related to the smartcard interaction in SPICE, which allows remote attackers to cause a denial of service, potentially leading to a QEMU-KVM process crash, or possibly execute arbitrary code. This is triggered by vectors related to connecting to a guest VM, resulting in a heap-based buffer overflow.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CESA-2016_1204

CESA-2016_1205

CVE-2016-0749

DSA-3596-1

MGASA-2016-0250

OPENSUSE-SU-2024:10393-1

RHSA-2016:1204

RHSA-2016:1205

RHSA-2016_1204

RHSA-2016_1205

SUSE-SU-2016:1559-1

SUSE-SU-2016:1561-1

SUSE-SU-2016_1561-1

USN-3014-1

Affected Products

Centos

Red Hat

Spice

Suse

Ubuntu

References · 37

• https://ubuntu.com/security/notices/USN-3014-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1559-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2016-0250 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10393-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2016-07/msg00004.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1561-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3596-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-0749 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2016:1204 · Vendor Advisory
• https://security.gentoo.org/glsa/201606-05 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2016-07/msg00003.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-0749 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-0749 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-0749 · Security Note
• https://osv.dev/vulnerability/USN-3014-1 · Vendor Advisory