Skip to content
OpenAdvisories
High ELSA-2015-1890 2 CVEs

Important: spice security update (Oracle Linux 7)

Published Oct 12, 2015 · Updated Oct 12, 2015

Ecosystem: Oracle Linux

Summary

[0.12.4-9.3]
- CVE-2015-5260 CVE-2015-5261 fixed various security flaws
Resolves: rhbz#1262771

[0.12.4-9.2]
- Validate surface_id
Resolves: rhbz#1262771

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 7 spice-server 0:0.12.4-9.el7_1.3
Oracle Linux · 7 spice-server-devel 0:0.12.4-9.el7_1.3

Vulnerabilities 2

  • Unscored —
    CVE-2015-5260

    Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service (heap-based memory…

    spice spice Debian Ubuntu
  • Unscored —
    CVE-2015-5261

    Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations…

    spice spice Debian Ubuntu