CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-5260

Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arbitrary code on the host via QXL commands related to the surface_id parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 52.2%

CVSS Severity

CVSS v3 Score 7.8

CVSS v2 Score 7.2

References

Products affected by CVE-2015-5260

Spice Project » Spice » Version: N/A

cpe:2.3:a:spice_project:spice:-
Spice Project » Spice » Version: 0.10.0

cpe:2.3:a:spice_project:spice:0.10.0
Spice Project » Spice » Version: 0.10.1

cpe:2.3:a:spice_project:spice:0.10.1
Spice Project » Spice » Version: 0.11.0

cpe:2.3:a:spice_project:spice:0.11.0
Spice Project » Spice » Version: 0.11.3

cpe:2.3:a:spice_project:spice:0.11.3
Spice Project » Spice » Version: 0.12.0

cpe:2.3:a:spice_project:spice:0.12.0
Spice Project » Spice » Version: 0.12.2

cpe:2.3:a:spice_project:spice:0.12.2
Spice Project » Spice » Version: 0.12.3

cpe:2.3:a:spice_project:spice:0.12.3
Spice Project » Spice » Version: 0.12.4

cpe:2.3:a:spice_project:spice:0.12.4
Spice Project » Spice » Version: 0.12.5

cpe:2.3:a:spice_project:spice:0.12.5
Spice Project » Spice » Version: 0.5.2

cpe:2.3:a:spice_project:spice:0.5.2
Spice Project » Spice » Version: 0.5.3

cpe:2.3:a:spice_project:spice:0.5.3
Spice Project » Spice » Version: 0.6.0

cpe:2.3:a:spice_project:spice:0.6.0
Spice Project » Spice » Version: 0.6.1

cpe:2.3:a:spice_project:spice:0.6.1
Spice Project » Spice » Version: 0.6.2

cpe:2.3:a:spice_project:spice:0.6.2
Spice Project » Spice » Version: 0.6.3

cpe:2.3:a:spice_project:spice:0.6.3
Spice Project » Spice » Version: 0.6.4

cpe:2.3:a:spice_project:spice:0.6.4
Spice Project » Spice » Version: 0.7.0

cpe:2.3:a:spice_project:spice:0.7.0
Spice Project » Spice » Version: 0.7.1

cpe:2.3:a:spice_project:spice:0.7.1
Spice Project » Spice » Version: 0.7.2

cpe:2.3:a:spice_project:spice:0.7.2
Spice Project » Spice » Version: 0.7.3

cpe:2.3:a:spice_project:spice:0.7.3
Spice Project » Spice » Version: 0.8.0

cpe:2.3:a:spice_project:spice:0.8.0
Spice Project » Spice » Version: 0.8.1

cpe:2.3:a:spice_project:spice:0.8.1
Spice Project » Spice » Version: 0.8.2

cpe:2.3:a:spice_project:spice:0.8.2
Spice Project » Spice » Version: 0.8.3

cpe:2.3:a:spice_project:spice:0.8.3
Spice Project » Spice » Version: 0.9.0

cpe:2.3:a:spice_project:spice:0.9.0
Spice Project » Spice » Version: 0.9.1

cpe:2.3:a:spice_project:spice:0.9.1
Canonical » Ubuntu Linux » Version: 14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04
Canonical » Ubuntu Linux » Version: 15.04

cpe:2.3:o:canonical:ubuntu_linux:15.04
Debian » Debian Linux » Version: 7.0

cpe:2.3:o:debian:debian_linux:7.0
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Redhat » Enterprise Linux Desktop » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0
Redhat » Enterprise Linux Desktop » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat » Enterprise Linux Hpc Node » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0
Redhat » Enterprise Linux Hpc Node » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0
Redhat » Enterprise Linux Hpc Node Eus » Version: 7.1

cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.1
Redhat » Enterprise Linux Server » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Server Eus » Version: 6.7.z

cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7.z
Redhat » Enterprise Linux Server Eus » Version: 7.1

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1
Redhat » Enterprise Linux Workstation » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0
Redhat » Enterprise Linux Workstation » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-5260

Products

Pricing

Contact Us