SUSE-SU-2016:1559-1: spice&distro=SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise

CVSS: UnknownPublished

Published 13-06-2016Last modified 04-02-2026

Vulnerability summary

SUSE-SU-2016:1559-1 is a vulnerability in spice&distro=SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise with no CVSS score yet.

Overall risk

0/100

0100

Minimal · default modelHow is this calculated?

CVSS score

Not scored

010

No CVSS score recorded

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 4 · Downstream 0 · Related 4

CVE-2015-5260 CVE-2015-5261 CVE-2016-0749 CVE-2016-2150

Timeline

13-06-2016
PublishedVulnerability first disclosed.
04-02-2026
Last modifiedVulnerability information updated.

Description

Security update for spice spice was updated to fix four security issues. These security issues were fixed: - CVE-2016-2150: Guest escape using crafted primary surface parameters (bsc#982386). - CVE-2016-0749: Heap-based buffer overflow in smartcard interaction (bsc#982385). - CVE-2015-5260: Insufficient validation of surface_id parameter could have caused a crash (bsc#944787). - CVE-2015-5261: Host memory access from guest using crafted images (bsc#948976).

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse4 products

spice&distro=SUSE Linux Enterprise Desktop 12 SP1< 0.12.5-4.1
spice&distro=SUSE Linux Enterprise Server 12 SP1< 0.12.5-4.1
spice&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1< 0.12.5-4.1
spice&distro=SUSE Linux Enterprise Software Development Kit 12 SP1< 0.12.5-4.1

1 vendor · 4 products

References

9 links