CVE-2016-9577

2018-07-2720:29:00

Alpine Linux Development Team

security.alpinelinux.org

0.019 Low

EPSS

Percentile

88.4%

JSON

A vulnerability was discovered in SPICE before 0.13.90 in the server’s protocol handling. An authenticated attacker could send crafted messages to the SPICE server causing a heap overflow leading to a crash or possible code execution.

OSVersionArchitecturePackageVersionFilename
Alpineedge-mainnoarchspice< 0.12.8-r3UNKNOWN
Alpine3.10-mainnoarchspice< 0.12.8-r3UNKNOWN
Alpine3.11-mainnoarchspice< 0.12.8-r3UNKNOWN
Alpine3.12-mainnoarchspice< 0.12.8-r3UNKNOWN
Alpine3.13-mainnoarchspice< 0.12.8-r3UNKNOWN
Alpine3.14-mainnoarchspice< 0.12.8-r3UNKNOWN
Alpine3.15-mainnoarchspice< 0.12.8-r3UNKNOWN
Alpine3.16-mainnoarchspice< 0.12.8-r3UNKNOWN
Alpine3.17-mainnoarchspice< 0.12.8-r3UNKNOWN
Alpine3.18-mainnoarchspice< 0.12.8-r3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-main	noarch	spice	< 0.12.8-r3	UNKNOWN
Alpine	3.10-main	noarch	spice	< 0.12.8-r3	UNKNOWN
Alpine	3.11-main	noarch	spice	< 0.12.8-r3	UNKNOWN
Alpine	3.12-main	noarch	spice	< 0.12.8-r3	UNKNOWN
Alpine	3.13-main	noarch	spice	< 0.12.8-r3	UNKNOWN
Alpine	3.14-main	noarch	spice	< 0.12.8-r3	UNKNOWN
Alpine	3.15-main	noarch	spice	< 0.12.8-r3	UNKNOWN
Alpine	3.16-main	noarch	spice	< 0.12.8-r3	UNKNOWN
Alpine	3.17-main	noarch	spice	< 0.12.8-r3	UNKNOWN
Alpine	3.18-main	noarch	spice	< 0.12.8-r3	UNKNOWN