p PatchFirst

CVE-2016-2150

CVE-2016-2150

This page contains facts from public vulnerability sources. Check the original advisory before updating.

SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters, a similar issue to CVE-2015-5261.

CVSS 7.1 · High · EPSS 0.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • spice Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.12.6-4.1

    Update to 0.12.6-4.1

  • spice Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.12.6-4.1

    Update to 0.12.6-4.1

  • spice Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.12.6-4.1

    Update to 0.12.6-4.1

  • spice Ubuntu:14.04:LTS

    Versions
    • 0.12.4-0nocelt1
    • 0.12.4-0nocelt1.1
    • 0.12.4-0nocelt1.1ubuntu1
    • 0.12.4-0nocelt2
    • 0.12.4-0nocelt2ubuntu1
    • 0.12.4-0nocelt2ubuntu1.1
    • 0.12.4-0nocelt2ubuntu1.2
    Affected ranges
    • ECOSYSTEM: < 0.12.4-0nocelt2ubuntu1.3

    Update to 0.12.4-0nocelt2ubuntu1.3

  • spice Ubuntu:16.04:LTS

    Versions
    • 0.12.5-1.1ubuntu2
    • 0.12.6-4
    Affected ranges
    • ECOSYSTEM: < 0.12.6-4ubuntu0.1

    Update to 0.12.6-4ubuntu0.1

Original sources

Check your server →