CVE-2016-0749

The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 94%
Affected Products (NVD)
VendorProductVersion
opensuseleap
42.1
opensuseopensuse
13.2
debiandebian_linux
8.0
redhatenterprise_linux
6.0
redhatenterprise_linux
6.0
redhatenterprise_linux_desktop
6.0
redhatenterprise_linux_server
6.0
redhatenterprise_linux_workstation
6.0
redhatenterprise_linux
7.0
redhatenterprise_linux
7.0
redhatenterprise_linux_desktop
7.0
redhatenterprise_linux_hpc_node_eus
7.2
redhatenterprise_linux_server
7.0
redhatenterprise_linux_server_aus
7.2
redhatenterprise_linux_server_eus
7.2
redhatenterprise_linux_workstation
7.0
spice_projectspice
-
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
spice
bookworm
0.15.1-1
fixed
bullseye
0.14.3-2.1
fixed
sid
0.15.2-1
fixed
trixie
0.15.2-1
fixed
wheezy
not-affected
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
spice
precise
ignored
trusty
Fixed 0.12.4-0nocelt2ubuntu1.3
released
wily
Fixed 0.12.5-1.1ubuntu2.1
released
xenial
Fixed 0.12.6-4ubuntu0.1
released
yakkety
Fixed 0.12.6-4ubuntu1
released
zesty
Fixed 0.12.6-4ubuntu1
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libspice-server-devel
suse enterprise sap 15
0.14.0-2.32
fixed
suse enterprise sap 15 SP1
0.14.1-2.21
fixed
suse enterprise sap 15 SP2
0.14.2-1.58
fixed
suse enterprise sap 15 SP3
0.14.3-1.48
fixed
suse enterprise sap 15 SP4
0.15.0-150400.2.8
fixed
suse enterprise sap 15 SP7
0.15.0-150600.9.1
fixed
suse enterprise server 15
0.14.0-2.32
fixed
suse enterprise server 15 SP1
0.14.1-2.21
fixed
suse enterprise server 15 SP2
0.14.2-1.58
fixed
suse enterprise server 15 SP3
0.14.3-1.48
fixed
suse enterprise server 15 SP4
0.15.0-150400.2.8
fixed
suse enterprise server 15 SP7
0.15.0-150600.9.1
fixed
libspice-server1
suse enterprise sap 15
0.14.0-2.32
fixed
suse enterprise sap 15 SP1
0.14.1-2.21
fixed
suse enterprise sap 15 SP2
0.14.2-1.58
fixed
suse enterprise sap 15 SP3
0.14.3-1.48
fixed
suse enterprise sap 15 SP4
0.15.0-150400.2.8
fixed
suse enterprise sap 15 SP7
0.15.0-150600.9.1
fixed
suse enterprise server 15
0.14.0-2.32
fixed
suse enterprise server 15 SP1
0.14.1-2.21
fixed
suse enterprise server 15 SP2
0.14.2-1.58
fixed
suse enterprise server 15 SP3
0.14.3-1.48
fixed
suse enterprise server 15 SP4
0.15.0-150400.2.8
fixed
suse enterprise server 15 SP7
0.15.0-150600.9.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
spice-server
RHEL 6
0:0.12.4-13.el6.1
fixed
RHEL 7
0:0.12.4-15.el7_2.1
fixed
spice-server-devel
RHEL 6
0:0.12.4-13.el6.1
fixed
RHEL 7
0:0.12.4-15.el7_2.1
fixed