Lucene search
PRIOn knowledge basePRION:CVE-2015-5260HistoryJun 07, 2016 - 2:06 p.m.
Heap overflow
2016-06-0714:06:00
PRIOn knowledge base
www.prio-n.com
6
Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arbitrary code on the host via QXL commands related to the surface_id parameter.
References
lists.freedesktop.org/archives/spice-devel/2015-October/022191.html
rhn.redhat.com/errata/RHSA-2015-1889.html
rhn.redhat.com/errata/RHSA-2015-1890.html
www.debian.org/security/2015/dsa-3371
www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
www.securityfocus.com/bid/77019
www.securitytracker.com/id/1033753
www.ubuntu.com/usn/USN-2766-1
bugzilla.redhat.com/show_bug.cgi?id=1260822
security.gentoo.org/glsa/201606-05
Related
debiancve
debiancve
CVE-2015-5260
2016-06-07 14:06:06
cvelist
cvelist
CVE-2015-5260
2016-06-07 14:00:00
nvd
nvd
CVE-2015-5260
2016-06-07 14:06:06
cve
cve
CVE-2015-5260
2016-06-07 14:06:06
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:07:56
Arbitrary Code Execution
2019-05-16 01:27:03
ubuntucve
ubuntucve
CVE-2015-5260
2015-09-08 00:00:00
redhat
redhat
(RHSA-2015:1889) Important: spice-server security update
2015-10-12 00:00:00
(RHSA-2015:1890) Important: spice security update
2015-10-12 00:00:00
nessus
nessus
Scientific Linux Security Update : spice-server on SL6.x x86_64 (20151012)
2015-10-13 00:00:00
RHEL 7 : spice (RHSA-2015:1890)
2015-10-13 00:00:00
RHEL 6 : spice-server (RHSA-2015:1889)
2015-10-13 00:00:00
openvas
openvas
CentOS Update for spice-server CESA-2015:1890 centos7
2015-10-13 00:00:00
Debian: Security Advisory (DSA-3371-1)
2015-10-08 00:00:00
Ubuntu: Security Advisory (USN-2766-1)
2015-10-07 00:00:00
ibm
ibm
mageia
mageia
Updated spice packages fix security vulnerabilities
2015-10-09 21:47:39
oraclelinux
oraclelinux
spice security update
2015-10-12 00:00:00
spice-server security update
2015-10-12 00:00:00
centos
centos
spice security update
2015-10-13 00:01:21
spice security update
2015-10-12 23:26:07
debian
debian
[SECURITY] [DSA 3371-1] spice security update
2015-10-09 18:22:33
[SECURITY] [DSA 3371-1] spice security update
2015-10-09 18:22:33
securityvulns
securityvulns
[SECURITY] [DSA 3371-1] spice security update
2015-10-11 00:00:00
spice memory corruption
2015-10-11 00:00:00
ubuntu
ubuntu
Spice vulnerabilities
2015-10-07 00:00:00
archlinux
archlinux
spice: multiple issues
2015-10-19 00:00:00
fedora
fedora
[SECURITY] Fedora 23 Update: mingw-spice-protocol-0.12.10-1.fc23
2015-10-11 16:08:04
[SECURITY] Fedora 22 Update: spice-protocol-0.12.10-1.fc22
2015-11-01 21:59:17
[SECURITY] Fedora 22 Update: mingw-spice-gtk-0.30-1.fc22
2015-11-01 21:59:17
gentoo
gentoo
spice: Multiple vulnerabilities
2016-06-16 00:00:00