CVE-2016-9578CWE-20CWE-770

A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling

High · published July 27, 2018

CVSS v3.0
7.5
EPSS
2%
Percentile
84.2
In the wild
Unconfirmed
What it is

A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An attacker able to connect to the SPICE server could send crafted messages which would cause the process to crash.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.02460 · 84.2th percentile
Weaknesses
CWE-20 · Improper Input Validation; CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2018-07-27T21:00Z
EPSS history
Timeline
  • 27 JUL 21:00Z
    A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling
    cvelistv5