ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2016-0749

—
CVSS 3.0
9.8 critical
EPSS
8%p95
Published
()
Modified
Description

The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.

Vendors
opensusedebianredhatspice project
Products
leap, opensuse, debian linux, enterprise linux, enterprise linux desktop, enterprise linux server, enterprise linux workstation, enterprise linux hpc node eus, enterprise linux server aus, enterprise linux server eus, spice
Weakness
CWE-119
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (8.5%)

In the news

No ingested article mentions this CVE yet.