CVE-2016-9578 PUBLISHED

A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An attacker able to connect to the SPICE server could send crafted messages which would cause the process to crash.

EPSS 3.33% · 87.2th percentile

Risk Scores

EPSS Score
3.33%
87.2th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSspice0, 0.12.4-0nocelt1, 0.12.4-0nocelt1.1
Ubuntu:16.04:LTSspice0, 0.12.5-1.1ubuntu2, 0.12.6-4

Timeline

References

Open in Interactive Console →