CVE-2016-0749: Buffer Overflow
The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0749?
CVE-2016-0749 has a high severity due to its potential to cause a denial of service and execute arbitrary code.
How do I fix CVE-2016-0749?
To fix CVE-2016-0749, update your SPICE package to the latest version provided by your operating system vendor.
What systems are affected by CVE-2016-0749?
CVE-2016-0749 affects multiple operating systems including openSUSE Leap 42.1, openSUSE 13.2, Debian 8.0, and various versions of Red Hat Enterprise Linux.
What type of vulnerability is CVE-2016-0749?
CVE-2016-0749 is classified as a heap-based buffer overflow vulnerability.
Can CVE-2016-0749 lead to remote code execution?
Yes, CVE-2016-0749 can potentially allow remote attackers to execute arbitrary code.