CVE

Id
87045  
CVE No.
CVE-2016-0749  
Status
Candidate  
Description
The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.  
Phase
Assigned (20151216)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
761878 87045 CVE-2016-0749 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html  View
761879 87045 CVE-2016-0749 DEBIAN:DSA-3596  View
761880 87045 CVE-2016-0749 URL:http://www.debian.org/security/2016/dsa-3596  View
761881 87045 CVE-2016-0749 GENTOO:GLSA-201606-05  View
761882 87045 CVE-2016-0749 URL:https://security.gentoo.org/glsa/201606-05  View
761883 87045 CVE-2016-0749 REDHAT:RHSA-2016:1204  View
761884 87045 CVE-2016-0749 URL:https://access.redhat.com/errata/RHSA-2016:1204  View
761885 87045 CVE-2016-0749 REDHAT:RHSA-2016:1205  View
761886 87045 CVE-2016-0749 URL:https://access.redhat.com/errata/RHSA-2016:1205  View
761887 87045 CVE-2016-0749 SUSE:openSUSE-SU-2016:1725  View
761888 87045 CVE-2016-0749 URL:http://lists.opensuse.org/opensuse-updates/2016-07/msg00003.html  View
761889 87045 CVE-2016-0749 SUSE:openSUSE-SU-2016:1726  View
761890 87045 CVE-2016-0749 URL:http://lists.opensuse.org/opensuse-updates/2016-07/msg00004.html  View
761891 87045 CVE-2016-0749 UBUNTU:USN-3014-1  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
1385 JVNDB-2016-002158 Android のメディアサーバの media/libmedia/mediametadataretriever.cpp における任意のコードを実行される脆弱性 Android のメディアサーバの media/libmedia/mediametadataretriever.cpp は、消去されたサービスバインダを誤って処理するため、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。 CVE-2016-0841 87045 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002158.html  View