CVEvulnerability

CVE-2015-5261

7.1 HIGH Published 2016-06-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-06-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.1 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS 2.0 ([email protected])
3.6 LOW — AV:L/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
CWE-119

Description

Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation.

Affected configurations

• canonical ubuntu linux 14.04 • canonical ubuntu linux 15.04 • redhat enterprise linux desktop 6.0 • redhat enterprise linux hpc node 6.0 • redhat enterprise linux server 6.0 • redhat enterprise linux server eus 6.7.z • redhat enterprise linux workstation 6.0 • redhat enterprise linux desktop 7.0 • redhat enterprise linux hpc node 7.0 • redhat enterprise linux hpc node eus 7.1 • redhat enterprise linux server 7.0 • redhat enterprise linux server eus 7.1 • redhat enterprise linux workstation 7.0 • debian debian linux 7.0 • debian debian linux 8.0 • spice project spice (<= 0.12.5)

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References