Back to search
CVE-2015-3247
Published: Sep 8, 2015
Modified: Aug 6, 2024
PUBLISHED
Description
Race condition in the worker_update_monitors_config function in SPICE 0.12.4 allows a remote authenticated guest user to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arbitrary code on the host via unspecified vectors.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
USN-2736-1
vendor-advisory
x_refsource_UBUNTU
DSA-3354
vendor-advisory
x_refsource_DEBIAN
RHSA-2015:1715
vendor-advisory
x_refsource_REDHAT
[Spice-devel] 20151006 Announcing spice 0.12.6
mailing-list
x_refsource_MLIST
openSUSE-SU-2015:1566
vendor-advisory
x_refsource_SUSE
1033460
vdb-entry
x_refsource_SECTRACK
1033459
vdb-entry
x_refsource_SECTRACK
1033753
vdb-entry
x_refsource_SECTRACK
RHSA-2015:1714
vendor-advisory
x_refsource_REDHAT
RHSA-2015:1713
vendor-advisory
x_refsource_REDHAT
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now