Skip to content
OpenAdvisories
Unscored USN-3014-1 2 CVEs

spice vulnerabilities

Published Jun 21, 2016 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Jing Zhao discovered that the Spice smartcard support incorrectly handled
memory. A remote attacker could use this issue to cause Spice to crash,
resulting in a denial of service, or possibly execute arbitrary code. This
issue only applied to Ubuntu 15.10 and Ubuntu 16.04 LTS. (CVE-2016-0749)

Frediano Ziglio discovered that Spice incorrectly handled certain primary
surface parameters. A malicious guest operating system could potentially
exploit this issue to escape virtualization. (CVE-2016-2150)

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS spice 0.12.4-0nocelt2ubuntu1.3
Ubuntu · 16.04 LTS 16.04:LTS spice 0.12.6-4ubuntu0.1

Vulnerabilities 2

  • Unscored —
    CVE-2016-0749

    The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or pos…

    spice spice Debian Ubuntu
  • Unscored —
    CVE-2016-2150

    SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface …

    spice spice Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2016-0749
  • report
    https://ubuntu.com/security/CVE-2016-2150