Описание
Security update for spice
spice was updated to fix two security issues.
These security issues were fixed:
- CVE-2016-2150: Guest escape using crafted primary surface parameters (bsc#982386).
- CVE-2016-0749: Heap-based buffer overflow in smartcard interaction (bsc#982385).
Список пакетов
SUSE Linux Enterprise Desktop 12
libspice-server1-0.12.4-8.9.1
SUSE Linux Enterprise Server 12
libspice-server1-0.12.4-8.9.1
SUSE Linux Enterprise Server for SAP Applications 12
libspice-server1-0.12.4-8.9.1
SUSE Linux Enterprise Software Development Kit 12
libspice-server-devel-0.12.4-8.9.1
Ссылки
- Link for SUSE-SU-2016:1561-1
- E-Mail link for SUSE-SU-2016:1561-1
- SUSE Security Ratings
- SUSE Bug 982385
- SUSE Bug 982386
- SUSE CVE CVE-2016-0749 page
- SUSE CVE CVE-2016-2150 page
Описание
The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.
Затронутые продукты
SUSE Linux Enterprise Desktop 12:libspice-server1-0.12.4-8.9.1
SUSE Linux Enterprise Server 12:libspice-server1-0.12.4-8.9.1
SUSE Linux Enterprise Server for SAP Applications 12:libspice-server1-0.12.4-8.9.1
SUSE Linux Enterprise Software Development Kit 12:libspice-server-devel-0.12.4-8.9.1
Ссылки
- CVE-2016-0749
- SUSE Bug 982385
- SUSE Bug 982386
Описание
SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters, a similar issue to CVE-2015-5261.
Затронутые продукты
SUSE Linux Enterprise Desktop 12:libspice-server1-0.12.4-8.9.1
SUSE Linux Enterprise Server 12:libspice-server1-0.12.4-8.9.1
SUSE Linux Enterprise Server for SAP Applications 12:libspice-server1-0.12.4-8.9.1
SUSE Linux Enterprise Software Development Kit 12:libspice-server-devel-0.12.4-8.9.1
Ссылки
- CVE-2016-2150
- SUSE Bug 982385
- SUSE Bug 982386