UBUNTU-CVE-2015-5261

Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation.

References

Affected packages

Ubuntu:14.04:LTS / spice

Package

Name: spice
Purl: pkg:deb/ubuntu/spice@0.12.4-0nocelt2ubuntu1.2?arch=source&distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.12.4-0nocelt2ubuntu1.2

Affected versions

0.*

0.12.4-0nocelt1

0.12.4-0nocelt1.1

0.12.4-0nocelt1.1ubuntu1

0.12.4-0nocelt2

0.12.4-0nocelt2ubuntu1

0.12.4-0nocelt2ubuntu1.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libspice-server1",
            "binary_version": "0.12.4-0nocelt2ubuntu1.2"
        },
        {
            "binary_name": "spice-client",
            "binary_version": "0.12.4-0nocelt2ubuntu1.2"
        }
    ],
    "availability": "No subscription required"
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2015/UBUNTU-CVE-2015-5261.json"

Ubuntu:16.04:LTS / spice

Package

Name: spice
Purl: pkg:deb/ubuntu/spice@0.12.5-1.1ubuntu2?arch=source&distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.12.5-1.1ubuntu2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libspice-server1",
            "binary_version": "0.12.5-1.1ubuntu2"
        },
        {
            "binary_name": "spice-client",
            "binary_version": "0.12.5-1.1ubuntu2"
        }
    ],
    "availability": "No subscription required"
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2015/UBUNTU-CVE-2015-5261.json"