CVE-2016-0749

Name of the Vulnerable Software and Affected Versions SPICE (affected versions not specified)

Description The issue is related to the smartcard interaction in SPICE, which allows remote attackers to cause a denial of service, potentially leading to a QEMU-KVM process crash, or possibly execute arbitrary code. This is triggered by vectors related to connecting to a guest VM, resulting in a heap-based buffer overflow.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.