CVE-2016-0749

EPSS 8.49%
Veröffentlicht 09.06.2016 16:59:00
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 11

NVD 17 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Opensuse ≫ Leap Version 42.1

Opensuse ≫ Opensuse Version 13.2

Debian ≫ Debian Linux Version 8.0

Redhat ≫ Enterprise Linux Version 6.0

Microsoft ≫ Windows

Redhat ≫ Enterprise Linux Version 6.0 SwEdition scientific_computing

Microsoft ≫ Windows

Redhat ≫ Enterprise Linux Desktop Version 6.0

Microsoft ≫ Windows

Redhat ≫ Enterprise Linux Server Version 6.0

Microsoft ≫ Windows

Redhat ≫ Enterprise Linux Workstation Version 6.0

Microsoft ≫ Windows

Redhat ≫ Enterprise Linux Version 7.0

Microsoft ≫ Windows

Redhat ≫ Enterprise Linux Version 7.0 SwEdition scientific_computing

Microsoft ≫ Windows

Redhat ≫ Enterprise Linux Desktop Version 7.0

Microsoft ≫ Windows

Redhat ≫ Enterprise Linux Hpc Node Eus Version 7.2

Microsoft ≫ Windows

Redhat ≫ Enterprise Linux Server Version 7.0

Microsoft ≫ Windows

Redhat ≫ Enterprise Linux Server Aus Version 7.2

Microsoft ≫ Windows

Redhat ≫ Enterprise Linux Server Eus Version 7.2

Microsoft ≫ Windows

Redhat ≫ Enterprise Linux Workstation Version 7.0

Microsoft ≫ Windows

Spice Project ≫ Spice Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	8.49%	0.943

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

https://security.gentoo.org/glsa/201606-05

http://lists.opensuse.org/opensuse-updates/2016-07/msg00003.html

http://lists.opensuse.org/opensuse-updates/2016-07/msg00004.html

http://www.debian.org/security/2016/dsa-3596

http://www.ubuntu.com/usn/USN-3014-1

https://access.redhat.com/errata/RHSA-2016:1204

https://access.redhat.com/errata/RHSA-2016:1205

https://nvd.nist.gov/vuln/detail/CVE-2016-0749

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-0749

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-0749

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2016-0749