{"id":"CVE-2016-9578","state":"PUBLISHED","title":"A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An attacker able to connect to the SPICE server could send crafted messages which would ca","description":"A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An attacker able to connect to the SPICE server could send crafted messages which would cause the process to crash.","publishedAt":"2018-07-27T21:00:00.000Z","updatedAt":"2024-08-06T02:59:02.515Z","severity":{"score":7.5,"label":"High","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","source":"redhat"},"assigner":"redhat","products":["Red Hat spice"],"affected":[{"vendor":"Red Hat","product":"spice","versions":[{"version":"0.13.90","status":"affected"}]}],"references":["https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9578","https://access.redhat.com/errata/RHSA-2017:0552","https://access.redhat.com/errata/RHSA-2017:0254","http://www.securityfocus.com/bid/96118","https://www.debian.org/security/2017/dsa-3790","http://rhn.redhat.com/errata/RHSA-2017-0253.html","http://rhn.redhat.com/errata/RHSA-2017-0549.html"],"weaknesses":["CWE-20","CWE-770"],"ingestedAt":"2026-10-29T19:42:58.401Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2016/9xxx/CVE-2016-9578.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2016-9578","state":"PUBLISHED","datePublished":"2018-07-27T21:00:00.000Z","dateUpdated":"2024-08-06T02:59:02.515Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2016-11-23T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An attacker able to connect to the SPICE server could send crafted messages which would cause the process to crash."}],"affected":[{"vendor":"Red Hat","product":"spice","versions":[{"version":"0.13.90","status":"affected"}]}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9578","tags":["x_refsource_CONFIRM"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0552","name":"RHSA-2017:0552","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0254","name":"RHSA-2017:0254","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.securityfocus.com/bid/96118","name":"96118","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://www.debian.org/security/2017/dsa-3790","name":"DSA-3790","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0253.html","name":"RHSA-2017:0253","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0549.html","name":"RHSA-2017:0549","tags":["vendor-advisory","x_refsource_REDHAT"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.0"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-20","description":"CWE-20","lang":"en","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-770","description":"CWE-770","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"redhat","dateUpdated":"2018-07-28T09:57:01.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749"},"datePublic":"2016-11-29T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secalert@redhat.com","ID":"CVE-2016-9578","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"spice","version":{"version_data":[{"version_value":"0.13.90"}]}}]},"vendor_name":"Red Hat"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An attacker able to connect to the SPICE server could send crafted messages which would cause the process to crash."}]},"impact":{"cvss":[[{"vectorString":"7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.0"}],[{"vectorString":"5.0/AV:N/AC:L/Au:N/C:N/I:N/A:P","version":"2.0"}]]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-20"}]},{"description":[{"lang":"eng","value":"CWE-770"}]}]},"references":{"reference_data":[{"name":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9578","refsource":"CONFIRM","url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9578"},{"name":"RHSA-2017:0552","refsource":"REDHAT","url":"https://access.redhat.com/errata/RHSA-2017:0552"},{"name":"RHSA-2017:0254","refsource":"REDHAT","url":"https://access.redhat.com/errata/RHSA-2017:0254"},{"name":"96118","refsource":"BID","url":"http://www.securityfocus.com/bid/96118"},{"name":"DSA-3790","refsource":"DEBIAN","url":"https://www.debian.org/security/2017/dsa-3790"},{"name":"RHSA-2017:0253","refsource":"REDHAT","url":"http://rhn.redhat.com/errata/RHSA-2017-0253.html"},{"name":"RHSA-2017:0549","refsource":"REDHAT","url":"http://rhn.redhat.com/errata/RHSA-2017-0549.html"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9578","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0552","name":"RHSA-2017:0552","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0254","name":"RHSA-2017:0254","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.securityfocus.com/bid/96118","name":"96118","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://www.debian.org/security/2017/dsa-3790","name":"DSA-3790","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0253.html","name":"RHSA-2017:0253","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0549.html","name":"RHSA-2017:0549","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-06T02:59:02.515Z"}}]}}}