Test ID:	1.3.6.1.4.1.25623.1.1.10.2016.0250
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2016-0250)
Summary:	The remote host is missing an update for the 'spice' package(s) announced via the MGASA-2016-0250 advisory.
Description:	Summary: The remote host is missing an update for the 'spice' package(s) announced via the MGASA-2016-0250 advisory. Vulnerability Insight: Updated spice packages fix security vulnerabilities: A memory allocation flaw, leading to a heap-based buffer overflow, was found in spice's smartcard interaction, which runs under the QEMU-KVM context on the host. A user connecting to a guest VM using spice could potentially use this flaw to crash the QEMU-KVM process or execute arbitrary code with the privileges of the host's QEMU-KVM process (CVE-2016-0749). A memory access flaw was found in the way spice handled certain guests using crafted primary surface parameters. A user in a guest could use this flaw to read from and write to arbitrary memory locations on the host (CVE-2016-2150). Affected Software/OS: 'spice' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-0749 DSA-3596 http://www.debian.org/security/2016/dsa-3596 GLSA-201606-05 https://security.gentoo.org/glsa/201606-05 RHSA-2016:1204 https://access.redhat.com/errata/RHSA-2016:1204 RHSA-2016:1205 https://access.redhat.com/errata/RHSA-2016:1205 USN-3014-1 http://www.ubuntu.com/usn/USN-3014-1 http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html openSUSE-SU-2016:1725 http://lists.opensuse.org/opensuse-updates/2016-07/msg00003.html openSUSE-SU-2016:1726 http://lists.opensuse.org/opensuse-updates/2016-07/msg00004.html Common Vulnerability Exposure (CVE) ID: CVE-2016-2150 https://bugzilla.redhat.com/show_bug.cgi?id=1313496
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.