NetSight
IP …
high7.1

CVE-2016-2150

SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters, a similar issue to CVE-2015-…

Impact

SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters, a similar issue to CVE-2015-5261.

Affected products

VendorProductAffected versions
RedhatEnterprise Linux
Versions 7.0, 6.0
RedhatEnterprise Linux Desktop
Versions 7.0, 6.0
RedhatEnterprise Linux Hpc Node Eus
Version 7.2
RedhatEnterprise Linux Server
Versions 7.0, 6.0
RedhatEnterprise Linux Server Aus
Version 7.2
RedhatEnterprise Linux Server Eus
Version 7.2
RedhatEnterprise Linux Workstation
Versions 7.0, 6.0
OpensuseLeap
Version 42.1
OpensuseOpensuse
Version 13.2
DebianDebian Linux
Version 8.0
Spice ProjectSpice
All versions

Weakness classification

CWE-284

References