CVE-2016-0749 PUBLISHED

The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.

EPSS 15.97% · 94.7th percentile

Risk Scores

EPSS Score
15.97%
94.7th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSspice0, 0.12.4-0nocelt1, 0.12.4-0nocelt1.1
Ubuntu:16.04:LTSspice0, 0.12.5-1.1ubuntu2, 0.12.6-4

Timeline

References

Open in Interactive Console →