CVE-2016-9578
A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An attacker able to connect to the SPICE server could send crafted messages which would cause the process to crash.
- Score
- CVSS 3.0 7.5 High
- Status
- Modified - secalert@redhat.com
- Published
- 2018-07-27
- Last modified
- 2024-08-06
- Weaknesses
- CWE-20, CWE-770
Affected products
- Debian Linux (Debian)
- Spice (Red Hat)
- Enterprise Linux Desktop (Redhat)
- Enterprise Linux Server (Redhat)
- Enterprise Linux Server Aus (Redhat)
- Enterprise Linux Server Eus (Redhat)
- Enterprise Linux Workstation (Redhat)
- Spice (Spice Project)
References
- http://rhn.redhat.com/errata/RHSA-2017-0253.html
- http://rhn.redhat.com/errata/RHSA-2017-0549.html
- http://www.securityfocus.com/bid/96118
- https://access.redhat.com/errata/RHSA-2017:0254
- https://access.redhat.com/errata/RHSA-2017:0552
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9578
- https://www.debian.org/security/2017/dsa-3790
