spice: memory corruption in worker_update_monitors_config()

A race condition flaw, leading to a heap-based memory corruption, was found in spice's workerupdatemonitorsconfig function, which runs under the QEMU-KVM context on the host. A user in a guest could leverage this flaw to crash the host QEMU-KVM process or, possibly, execute arbitrary code with th...

spice: memory corruption in worker_update_monitors_config()

A race condition flaw, leading to a heap-based memory corruption, was found in spice's workerupdatemonitorsconfig function, which runs under the QEMU-KVM context on the host. A user in a guest could leverage this flaw to crash the host QEMU-KVM process or, possibly, execute arbitrary code with th...

PT-2015-6123

Name of the Vulnerable Software and Affected Versions SPICE version 0.12.4 Description A race condition in the worker update monitors config function allows a remote authenticated guest user to cause a denial of service, resulting in heap-based memory corruption and QEMU-KVM crash, or possibly...