MGASA-2015-0373

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2015-0373.html
Import Source
https://advisories.mageia.org/MGASA-2015-0373.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2015-0373
Related
Published
2015-09-15T14:55:06Z
Modified
2015-09-15T14:38:48Z
Summary
Updated spice packages fix CVE-2015-3247
Details

Updated spice packages fix security vulnerability:

A race condition flaw, leading to a heap-based memory corruption, was found in spice's workerupdatemonitors_config() function, which runs under the QEMU-KVM context on the host. A user in a guest could leverage this flaw to crash the host QEMU-KVM process or, possibly, execute arbitrary code with the privileges of the host QEMU-KVM process (CVE-2015-3247).

References
Credits

Affected packages

Mageia:4 / spice

Package

Name
spice
Purl
pkg:rpm/mageia/spice?distro=mageia-4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.12.4-4.1.mga4

Ecosystem specific 

{
    "section": "core"
}

Mageia:5 / spice

Package

Name
spice
Purl
pkg:rpm/mageia/spice?distro=mageia-5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.12.5-2.1.mga5

Ecosystem specific 

{
    "section": "core"
}