VULNERABILITY INTELLIGENCE

CVE-2016-9578

CVSS score7.5 HIGH
EPSS probability2.46%
CISA KEVNot currently listed
Published2018-07-27
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An attacker able to connect to the SPICE server could send crafted messages which would cause the process to crash.

Weakness classification

  • CWE-20: Improper Input Validation
  • CWE-770: Allocation of Resources Without Limits or Throttling

Primary references