CVE-2015-3247

Race condition in the worker_update_monitors_config function in SPICE 0.12.4 allows a remote authenticated guest user to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arbitrary code on the host via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.9 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 73%
Affected Products (NVD)
VendorProductVersion
spice_projectspice
0.12.4
redhatenterprise_linux
6.0
redhatenterprise_linux
7.0
redhatenterprise_linux_desktop
6.0
redhatenterprise_linux_desktop
7.0
redhatenterprise_linux_hpc_node
7.0
redhatenterprise_linux_server
6.0
redhatenterprise_linux_server
7.0
redhatenterprise_linux_workstation
6.0
redhatenterprise_linux_workstation
7.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
spice
bookworm
0.15.1-1
fixed
bullseye
0.14.3-2.1
fixed
sid
0.15.2-1
fixed
trixie
0.15.2-1
fixed
wheezy
not-affected
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
spice
precise
not-affected
trusty
Fixed 0.12.4-0nocelt2ubuntu1.1
released
vivid
Fixed 0.12.5-1ubuntu0.1
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libspice-server-devel
suse enterprise sap 15
0.14.0-2.32
fixed
suse enterprise sap 15 SP1
0.14.1-2.21
fixed
suse enterprise sap 15 SP2
0.14.2-1.58
fixed
suse enterprise sap 15 SP3
0.14.3-1.48
fixed
suse enterprise sap 15 SP4
0.15.0-150400.2.8
fixed
suse enterprise sap 15 SP7
0.15.0-150600.9.1
fixed
suse enterprise server 15
0.14.0-2.32
fixed
suse enterprise server 15 SP1
0.14.1-2.21
fixed
suse enterprise server 15 SP2
0.14.2-1.58
fixed
suse enterprise server 15 SP3
0.14.3-1.48
fixed
suse enterprise server 15 SP4
0.15.0-150400.2.8
fixed
suse enterprise server 15 SP7
0.15.0-150600.9.1
fixed
libspice-server1
suse enterprise sap 15
0.14.0-2.32
fixed
suse enterprise sap 15 SP1
0.14.1-2.21
fixed
suse enterprise sap 15 SP2
0.14.2-1.58
fixed
suse enterprise sap 15 SP3
0.14.3-1.48
fixed
suse enterprise sap 15 SP4
0.15.0-150400.2.8
fixed
suse enterprise sap 15 SP7
0.15.0-150600.9.1
fixed
suse enterprise server 15
0.14.0-2.32
fixed
suse enterprise server 15 SP1
0.14.1-2.21
fixed
suse enterprise server 15 SP2
0.14.2-1.58
fixed
suse enterprise server 15 SP3
0.14.3-1.48
fixed
suse enterprise server 15 SP4
0.15.0-150400.2.8
fixed
suse enterprise server 15 SP7
0.15.0-150600.9.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
spice-server
RHEL 6
0:0.12.4-12.el6_7.1
fixed
RHEL 7
0:0.12.4-9.el7_1.1
fixed
spice-server-devel
RHEL 6
0:0.12.4-12.el6_7.1
fixed
RHEL 7
0:0.12.4-9.el7_1.1
fixed