CVE-2015-5260
HighSummary
Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service or possibly execute arbitrary code on the host via QXL commands related to the surface_id parameter.
Risk Assessment
This vulnerability may lead to memory corruption and QEMU-KVM crashes, jeopardizing system stability and data security.
Recommendation
It is recommended to update SPICE to version 0.12.6 or later to mitigate this vulnerability.
Other vulnerabilities in SPICE
See all- CVE-2017-7506High
Spice versions through 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server, resulting in crash and/or server memory leak.
- CVE-2016-2150High
SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters, a similar issue to CVE-2015-5261.
- CVE-2015-5261High
Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation.
- CVE-2016-0749Critical
The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.
Original NVD description (English source)
Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arbitrary code on the host via QXL commands related to the surface_id parameter.