NVD

Id
25136  
Name
CVE-2015-3247  
Description
Race condition in the worker_update_monitors_config function in SPICE 0.12.4 allows a remote authenticated guest user to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arbitrary code on the host via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-09-08  
Modified Date
2016-12-21  
Seq
2015-3247  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
132939 25136 CVE-2015-3247 [Spice-devel] 20151006 Announcing spice 0.12.6  View
132940 25136 CVE-2015-3247 openSUSE-SU-2015:1566  View
132941 25136 CVE-2015-3247 RHSA-2015:1713  View
132942 25136 CVE-2015-3247 RHSA-2015:1714  View
132943 25136 CVE-2015-3247 RHSA-2015:1715  View
132944 25136 CVE-2015-3247 DSA-3354  View
132945 25136 CVE-2015-3247 1033459  View
132946 25136 CVE-2015-3247 1033460  View
132947 25136 CVE-2015-3247 USN-2736-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9352 JVNDB-2015-004672 SPICE の worker_update_monitors_config 関数におけるサービス運用妨害 (DoS) の脆弱性 SPICE の worker_update_monitors_config 関数には、競合状態により、サービス運用妨害 (ヒープベースのメモリ破損および QEMU-KVM クラッシュ) 状態にされる、またはホスト上で任意のコードを実行される脆弱性が存在します。 CVE-2015-3247 80472 CVE-2015-3247 25136 6.9 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004672.html 2015-09-03 2015-09-10 View