Skip to content
OpenAdvisories
Unscored DSA-3596-1 2 CVEs

spice - security update

Published Jun 6, 2016 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 8 spice 0.12.5-1+deb8u3

Vulnerabilities 2

  • Unscored —

    The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or pos…

  • Unscored —

    SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface …