Out-of-Bounds The advisory has been revoked - it doesn't affect any version of package spice (opens in a new tab)

Threat Intelligence

1.14% (63^rd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-UBUNTU1204-SPICE-626716
published8 Sept 2015
disclosed8 Sept 2015

Report a new vulnerability Found a mistake?

Introduced: 8 Sep 2015

CVE-2015-3247 (opens in a new tab) CWE-119 (opens in a new tab) CWE-362 (opens in a new tab)

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:12.04.

NVD Description

Note: Versions mentioned in the description apply only to the upstream spice package and not the spice package as distributed by Ubuntu.

Race condition in the worker_update_monitors_config function in SPICE 0.12.4 allows a remote authenticated guest user to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arbitrary code on the host via unspecified vectors.