SPICE vulnerabilities
5 known CVE vulnerabilities in SPICE, translated and rated.
- CVE-2017-7506High
Spice versions through 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server, resulting in crash and/or server memory leak.
- CVE-2016-2150High
SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters, a similar issue to CVE-2015-5261.
- CVE-2015-5261High
Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation.
- CVE-2015-5260High
Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service or possibly execute arbitrary code on the host via QXL commands related to the surface_id parameter.
- CVE-2016-0749Critical
The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.