| Package | Affected versions | Patched versions |
|---|---|---|
| spice | ≤ 0.12.5 |
Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arbitrary code on the host via QXL commands related to the surface_id parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free