CVE-2015-5260 PUBLISHED

Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arbitrary code on the host via QXL commands related to the surface_id parameter.

EPSS 0.24% · 47.3th percentile

Risk Scores

EPSS Score
0.24%
47.3th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSspice0, 0.12.4-0nocelt1, 0.12.4-0nocelt1.1
Ubuntu:16.04:LTSspice0

Timeline

References

Open in Interactive Console →