| Name | CVE-2016-9578 |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SuSE, Mageia, GitHub code/issues, web search, more) |
| References | DLA-825-1, DSA-3790-1 |
| Debian Bugs | 854336 |
Vulnerable and fixed packages
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|
| spice (PTS) | wheezy | 0.11.0-1+deb7u2 | vulnerable |
| wheezy (security) | 0.11.0-1+deb7u4 | fixed |
| jessie (security), jessie | 0.12.5-1+deb8u5 | fixed |
| stretch (security), stretch | 0.12.8-2.1+deb9u1 | fixed |
| buster, sid | 0.13.90-0.2 | fixed |
The information below is based on the following data on fixed versions.
Notes
Fixed by: https://cgit.freedesktop.org/spice/spice/commit/?h=0.12&id=1c6517973095a67c8cb57f3550fc1298404ab556 (0.12.x)
Fixed by: https://cgit.freedesktop.org/spice/spice/commit/?h=0.12&id=f66dc643635518e53dfbe5262f814a64eec54e4a (0.12.x)