CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-5261

Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 27.7%

CVSS Severity

CVSS v3 Score 7.1

CVSS v2 Score 3.6

References

Products affected by CVE-2015-5261

Spice Project » Spice » Version: N/A

cpe:2.3:a:spice_project:spice:-
Spice Project » Spice » Version: 0.10.0

cpe:2.3:a:spice_project:spice:0.10.0
Spice Project » Spice » Version: 0.10.1

cpe:2.3:a:spice_project:spice:0.10.1
Spice Project » Spice » Version: 0.11.0

cpe:2.3:a:spice_project:spice:0.11.0
Spice Project » Spice » Version: 0.11.3

cpe:2.3:a:spice_project:spice:0.11.3
Spice Project » Spice » Version: 0.12.0

cpe:2.3:a:spice_project:spice:0.12.0
Spice Project » Spice » Version: 0.12.2

cpe:2.3:a:spice_project:spice:0.12.2
Spice Project » Spice » Version: 0.12.3

cpe:2.3:a:spice_project:spice:0.12.3
Spice Project » Spice » Version: 0.12.4

cpe:2.3:a:spice_project:spice:0.12.4
Spice Project » Spice » Version: 0.12.5

cpe:2.3:a:spice_project:spice:0.12.5
Spice Project » Spice » Version: 0.5.2

cpe:2.3:a:spice_project:spice:0.5.2
Spice Project » Spice » Version: 0.5.3

cpe:2.3:a:spice_project:spice:0.5.3
Spice Project » Spice » Version: 0.6.0

cpe:2.3:a:spice_project:spice:0.6.0
Spice Project » Spice » Version: 0.6.1

cpe:2.3:a:spice_project:spice:0.6.1
Spice Project » Spice » Version: 0.6.2

cpe:2.3:a:spice_project:spice:0.6.2
Spice Project » Spice » Version: 0.6.3

cpe:2.3:a:spice_project:spice:0.6.3
Spice Project » Spice » Version: 0.6.4

cpe:2.3:a:spice_project:spice:0.6.4
Spice Project » Spice » Version: 0.7.0

cpe:2.3:a:spice_project:spice:0.7.0
Spice Project » Spice » Version: 0.7.1

cpe:2.3:a:spice_project:spice:0.7.1
Spice Project » Spice » Version: 0.7.2

cpe:2.3:a:spice_project:spice:0.7.2
Spice Project » Spice » Version: 0.7.3

cpe:2.3:a:spice_project:spice:0.7.3
Spice Project » Spice » Version: 0.8.0

cpe:2.3:a:spice_project:spice:0.8.0
Spice Project » Spice » Version: 0.8.1

cpe:2.3:a:spice_project:spice:0.8.1
Spice Project » Spice » Version: 0.8.2

cpe:2.3:a:spice_project:spice:0.8.2
Spice Project » Spice » Version: 0.8.3

cpe:2.3:a:spice_project:spice:0.8.3
Spice Project » Spice » Version: 0.9.0

cpe:2.3:a:spice_project:spice:0.9.0
Spice Project » Spice » Version: 0.9.1

cpe:2.3:a:spice_project:spice:0.9.1
Canonical » Ubuntu Linux » Version: 14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04
Canonical » Ubuntu Linux » Version: 15.04

cpe:2.3:o:canonical:ubuntu_linux:15.04
Debian » Debian Linux » Version: 7.0

cpe:2.3:o:debian:debian_linux:7.0
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Redhat » Enterprise Linux Desktop » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0
Redhat » Enterprise Linux Desktop » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat » Enterprise Linux Hpc Node » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0
Redhat » Enterprise Linux Hpc Node » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0
Redhat » Enterprise Linux Hpc Node Eus » Version: 7.1

cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.1
Redhat » Enterprise Linux Server » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Server Eus » Version: 6.7.z

cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7.z
Redhat » Enterprise Linux Server Eus » Version: 7.1

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1
Redhat » Enterprise Linux Workstation » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0
Redhat » Enterprise Linux Workstation » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-5261

Products

Pricing

Contact Us