CVE-2016-9578 A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An attacker able to connect to the SPICE server could send crafted messages which would cause the process to c...
HighCVSS 7.5
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An attacker able to connect to the SPICE server could send crafted messages which would cause the process to crash.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/spice(Debian:12) | < 0.12.8-2.1 | 0.12.8-2.1 |
| debian/spice(Debian:13) | < 0.12.8-2.1 | 0.12.8-2.1 |
| debian/spice(Debian:14) | < 0.12.8-2.1 | 0.12.8-2.1 |
| spice project spice | < 0.13.90 | 0.13.90 |
| debian linux | = 8.0 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux server aus | = 7.3 | No fix listed |
| redhat enterprise linux server aus | = 7.4 | No fix listed |
| redhat enterprise linux server eus | = 7.3 | No fix listed |
| redhat enterprise linux server eus | = 7.4 | No fix listed |
| redhat enterprise linux server eus | = 7.5 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| alpine/spice(Alpine:v3.10) | < 0.12.8-r3 | 0.12.8-r3 |
| alpine/spice(Alpine:v3.11) | < 0.12.8-r3 | 0.12.8-r3 |
| alpine/spice(Alpine:v3.12) | < 0.12.8-r3 | 0.12.8-r3 |
| alpine/spice(Alpine:v3.13) | < 0.12.8-r3 | 0.12.8-r3 |
| alpine/spice(Alpine:v3.14) | < 0.12.8-r3 | 0.12.8-r3 |
| alpine/spice(Alpine:v3.15) | < 0.12.8-r3 | 0.12.8-r3 |
| alpine/spice(Alpine:v3.16) | < 0.12.8-r3 | 0.12.8-r3 |
| alpine/spice(Alpine:v3.17) | < 0.12.8-r3 | 0.12.8-r3 |
| alpine/spice(Alpine:v3.18) | < 0.12.8-r3 | 0.12.8-r3 |
Show 10 more
| Product | Affected versions | Fixed in |
|---|---|---|
| alpine/spice(Alpine:v3.19) | < 0.12.8-r3 | 0.12.8-r3 |
| alpine/spice(Alpine:v3.20) | < 0.12.8-r3 | 0.12.8-r3 |
| alpine/spice(Alpine:v3.21) | < 0.12.8-r3 | 0.12.8-r3 |
| alpine/spice(Alpine:v3.22) | < 0.12.8-r3 | 0.12.8-r3 |
| alpine/spice(Alpine:v3.23) | < 0.12.8-r3 | 0.12.8-r3 |
| alpine/spice(Alpine:v3.24) | < 0.12.8-r3 | 0.12.8-r3 |
| alpine/spice(Alpine:v3.7) | < 0.12.8-r3 | 0.12.8-r3 |
| alpine/spice(Alpine:v3.8) | < 0.12.8-r3 | 0.12.8-r3 |
| alpine/spice(Alpine:v3.9) | < 0.12.8-r3 | 0.12.8-r3 |
| redhat/spice | = 0.13.90 | No fix listed |
References
- Debian Security Tracker CVE-2016-9578 vendor-advisory
- RHSA-2017:0253 third-party-advisory vendor-advisory
- RHSA-2017:0549 third-party-advisory vendor-advisory
- 96118 third-party-advisory vdb-entry
- RHSA-2017:0254 third-party-advisory vendor-advisory
- RHSA-2017:0552 third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- DSA-3790 third-party-advisory vendor-advisory
- security.alpinelinux.org vendor-advisory
- bugs.debian.org issue-tracking