CVE-2016-0749
CriticalSummary
The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.
Risk Assessment
Attackers may exploit this vulnerability to disrupt system operations or gain control over it, posing a serious security threat to the organization.
Recommendation
It is recommended to update SPICE software to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in SPICE
See all- CVE-2017-7506High
Spice versions through 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server, resulting in crash and/or server memory leak.
- CVE-2016-2150High
SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters, a similar issue to CVE-2015-5261.
- CVE-2015-5261High
Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation.
- CVE-2015-5260High
Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service or possibly execute arbitrary code on the host via QXL commands related to the surface_id parameter.
Original NVD description (English source)
The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.