CVEvulnerability

CVE-2015-3247

6.9 MEDIUM Published 2015-09-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-09-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119, CWE-362

Description

Race condition in the worker_update_monitors_config function in SPICE 0.12.4 allows a remote authenticated guest user to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arbitrary code on the host via unspecified vectors.

Affected configurations

• spice project spice 0.12.4 • redhat enterprise linux 6.0 • redhat enterprise linux 7.0 • redhat enterprise linux desktop 6.0 • redhat enterprise linux desktop 7.0 • redhat enterprise linux hpc node 6 • redhat enterprise linux hpc node 7.0 • redhat enterprise linux server 6.0 • redhat enterprise linux server 7.0 • redhat enterprise linux workstation 6.0 • redhat enterprise linux workstation 7.0

Related

Weakness · CWE (2)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References