CVE-2016-9577

2016-12-3100:00:00

ubuntu.com

0.019 Low

EPSS

Percentile

88.4%

JSON

A vulnerability was discovered in SPICE before 0.13.90 in the server’s
protocol handling. An authenticated attacker could send crafted messages to
the SPICE server causing a heap overflow leading to a crash or possible
code execution.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchspice< 0.12.4-0nocelt2ubuntu1.4UNKNOWN
ubuntu16.04noarchspice< 0.12.6-4ubuntu0.2UNKNOWN
ubuntu16.10noarchspice< 0.12.8-1ubuntu0.1UNKNOWN
ubuntu17.04noarchspice< 0.12.8-2ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	14.04	noarch	spice	< 0.12.4-0nocelt2ubuntu1.4	UNKNOWN
ubuntu	16.04	noarch	spice	< 0.12.6-4ubuntu0.2	UNKNOWN
ubuntu	16.10	noarch	spice	< 0.12.8-1ubuntu0.1	UNKNOWN
ubuntu	17.04	noarch	spice	< 0.12.8-2ubuntu1	UNKNOWN