Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2015-5260
7.2
HIGHCVSS v2
Published
June 7, 2016
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arbitrary code on the host via QXL commands related to the surface_id parameter.
NPM
GitHub