Lucene search
+L

1838 matches found

OSV
OSV
added 2016/06/07 2:06 p.m.4 views

DEBIAN-CVE-2015-5261

Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation...

7.1CVSS7.6AI score0.00486EPSS
SaveExploits0References1
OSV
OSV
added 2016/06/07 2:06 p.m.10 views

CVE-2015-5261

Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation...

7.1CVSS7.5AI score
SaveExploits0References10
NVD
NVD
added 2016/06/07 2:06 p.m.25 views

CVE-2015-5261

Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation...

7.1CVSS7.2AI score0.00486EPSS
SaveExploits0References10
OSV
OSV
added 2016/06/07 2:06 p.m.17 views

CVE-2015-5260

Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service heap-based memory corruption and QEMU-KVM crash or possibly execute arbitrary code on the host via QXL commands related to the surfaceid parameter...

7.8CVSS8.5AI score
SaveExploits0References10
NVD
NVD
added 2016/06/07 2:06 p.m.21 views

CVE-2015-5260

Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service heap-based memory corruption and QEMU-KVM crash or possibly execute arbitrary code on the host via QXL commands related to the surfaceid parameter...

7.8CVSS8.4AI score0.00575EPSS
SaveExploits0References10
OSV
OSV
added 2016/06/07 2:06 p.m.7 views

DEBIAN-CVE-2015-5260

Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service heap-based memory corruption and QEMU-KVM crash or possibly execute arbitrary code on the host via QXL commands related to the surfaceid parameter...

7.8CVSS8.4AI score0.00575EPSS
SaveExploits0References1
Prion
Prion
added 2016/06/07 2:06 p.m.24 views

Heap overflow

Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service heap-based memory corruption and QEMU-KVM crash or possibly execute arbitrary code on the host via QXL commands related to the surfaceid parameter...

7.2CVSS8.8AI score0.00575EPSS
SaveExploits0References10Affected Software9
Prion
Prion
added 2016/06/07 2:06 p.m.25 views

Heap overflow

Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation...

3.6CVSS7.6AI score0.00486EPSS
SaveExploits0References10Affected Software9
CVE
CVE
added 2016/06/07 2:00 p.m.104 views

CVE-2015-5261

CVE-2015-5261 is a heap-based buffer overflow in SPICE before 0.12.6 that allows local guest OS users to read from or write to arbitrary host memory via guest QXL surface-creation parameters. This is a local vulnerability affecting SPICE/QXL components used in virtualized environments. See connec...

7.1CVSS7.4AI score0.00486EPSS
SaveExploits0References10Affected Software1
Cvelist
Cvelist
added 2016/06/07 2:00 p.m.36 views

CVE-2015-5260

Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service heap-based memory corruption and QEMU-KVM crash or possibly execute arbitrary code on the host via QXL commands related to the surfaceid parameter...

8.5AI score0.00575EPSS
SaveExploits0References10
Cvelist
Cvelist
added 2016/06/07 2:00 p.m.40 views

CVE-2015-5261

Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation...

7.2AI score0.00486EPSS
SaveExploits0References10
CVE
CVE
added 2016/06/07 2:00 p.m.132 views

CVE-2015-5260

SPICE vulnerability CVE-2015-5260 is a heap-based buffer overflow in SPICE prior to 0.12.6 caused by improper bounds handling of certain QXL commands related to the surface_id parameter. A local attacker could cause a denial of service (heap corruption and QEMU-KVM crash) or possibly execute code...

7.8CVSS8.1AI score0.00575EPSS
SaveExploits0References10Affected Software5
Debian CVE
Debian CVE
added 2016/06/07 2:00 p.m.29 views

CVE-2015-5261

Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation...

7.1CVSS7.9AI score0.00486EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2016/06/07 2:00 p.m.26 views

CVE-2015-5260

Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service heap-based memory corruption and QEMU-KVM crash or possibly execute arbitrary code on the host via QXL commands related to the surfaceid parameter...

7.8CVSS8.7AI score0.00575EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2016/06/07 12:00 a.m.30 views

RedHat Update for spice-server RHSA-2016:1204-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.4AI score0.08492EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2016/06/07 12:00 a.m.46 views

RedHat Update for spice RHSA-2016:1205-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.4AI score0.08492EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2016/06/07 12:00 a.m.37 views

RHEL 6 : spice-server (RHSA-2016:1204)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:1204 advisory. The Simple Protocol for Independent Computing Environments SPICE is a remote display protocol for virtual environments. SPICE users can acce...

10CVSS8.5AI score0.08492EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2016/06/07 12:00 a.m.34 views

Debian DSA-3596-1 : spice - security update

Several vulnerabilities were discovered in spice, a SPICE protocol client and server library. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2016-0749 Jing Zhao of Red Hat discovered a memory allocation flaw, leading to a heap-based buffer overflow in...

10CVSS8.6AI score0.08492EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2016/06/07 12:00 a.m.44 views

RHEL 7 : spice (RHSA-2016:1205)

An update for spice is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

10CVSS8.3AI score0.08492EPSS
SaveExploits0References5
CNVD
CNVD
added 2016/06/07 12:00 a.m.5 views

Red Hat SPICE is vulnerable

Red Hat SPICE is an adaptive telepresence open-source protocol used by Red Hat's Enterprise Virtualized Desktop Edition to connect users to their virtual desktops, providing the exact same end-user experience as a physical desktop. A security vulnerability exists in Red Hat SPICE. The vulnerabili...

7.1CVSS6.5AI score0.00363EPSS
SaveExploits0References1
Rows per page
Query Builder