Vulnerability Details CVE-2016-9578
A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An attacker able to connect to the SPICE server could send crafted messages which would cause the process to crash.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.037
EPSS Ranking 87.2%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://rhn.redhat.com/errata/RHSA-2017-0253.html
- http://rhn.redhat.com/errata/RHSA-2017-0549.html
- http://www.securityfocus.com/bid/96118
- https://access.redhat.com/errata/RHSA-2017:0254
- https://access.redhat.com/errata/RHSA-2017:0552
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9578
- https://www.debian.org/security/2017/dsa-3790
- http://rhn.redhat.com/errata/RHSA-2017-0253.html
- http://rhn.redhat.com/errata/RHSA-2017-0549.html
- http://www.securityfocus.com/bid/96118
- https://access.redhat.com/errata/RHSA-2017:0254
- https://access.redhat.com/errata/RHSA-2017:0552
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9578
- https://www.debian.org/security/2017/dsa-3790
Products affected by CVE-2016-9578
-
cpe:2.3:a:spice_project:spice:-
-
cpe:2.3:a:spice_project:spice:0.10.0
-
cpe:2.3:a:spice_project:spice:0.10.1
-
cpe:2.3:a:spice_project:spice:0.11.0
-
cpe:2.3:a:spice_project:spice:0.11.3
-
cpe:2.3:a:spice_project:spice:0.12.0
-
cpe:2.3:a:spice_project:spice:0.12.2
-
cpe:2.3:a:spice_project:spice:0.12.3
-
cpe:2.3:a:spice_project:spice:0.12.4
-
cpe:2.3:a:spice_project:spice:0.12.5
-
cpe:2.3:a:spice_project:spice:0.12.6
-
cpe:2.3:a:spice_project:spice:0.12.7
-
cpe:2.3:a:spice_project:spice:0.12.8
-
cpe:2.3:a:spice_project:spice:0.13.0
-
cpe:2.3:a:spice_project:spice:0.13.1
-
cpe:2.3:a:spice_project:spice:0.13.2
-
cpe:2.3:a:spice_project:spice:0.13.3
-
cpe:2.3:a:spice_project:spice:0.5.2
-
cpe:2.3:a:spice_project:spice:0.5.3
-
cpe:2.3:a:spice_project:spice:0.6.0
-
cpe:2.3:a:spice_project:spice:0.6.1
-
cpe:2.3:a:spice_project:spice:0.6.2
-
cpe:2.3:a:spice_project:spice:0.6.3
-
cpe:2.3:a:spice_project:spice:0.6.4
-
cpe:2.3:a:spice_project:spice:0.7.0
-
cpe:2.3:a:spice_project:spice:0.7.1
-
cpe:2.3:a:spice_project:spice:0.7.2
-
cpe:2.3:a:spice_project:spice:0.7.3
-
cpe:2.3:a:spice_project:spice:0.8.0
-
cpe:2.3:a:spice_project:spice:0.8.1
-
cpe:2.3:a:spice_project:spice:0.8.2
-
cpe:2.3:a:spice_project:spice:0.8.3
-
cpe:2.3:a:spice_project:spice:0.9.0
-
cpe:2.3:a:spice_project:spice:0.9.1
-
cpe:2.3:o:debian:debian_linux:8.0
-
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0
-
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
-
cpe:2.3:o:redhat:enterprise_linux_server:6.0
-
cpe:2.3:o:redhat:enterprise_linux_server:7.0
-
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3
-
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4
-
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3
-
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4
-
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5
-
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0
-
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0