Every CVE Search/ Get API key

CVE-2016-9577

A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An...

7.5 HighFix available

CVE-2016-9577 is a high vulnerability (CVSS 7.5) in Red Hat Spice, published December 31, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.79%, the 89th percentile. Fixed in spice 0.12.8-r3.

A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An authenticated attacker could send crafted messages to the SPICE server causing a heap overflow leading to a crash or possible code execution.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

3.79%Up 1.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

CVE List Score used 7.5

A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An authenticated attacker could send crafted messages to the SPICE server causing a heap overflow leading to a crash or possible code execution.

Record
CVE-2016-9577
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-20, CWE-122
Updated
2026-11-02
EUVDEUVD-2016-10383 7.5

A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An authenticated attacker could send crafted messages to the SPICE server causing a heap overflow leading to a crash or possible code execution.

Record
EUVD-2016-10383
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-fjp3-q3m4-wmjx 8.8

A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An...

A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An authenticated attacker could send crafted messages to the SPICE server causing a heap overflow leading to a crash or possible code execution.

Record
GHSA-fjp3-q3m4-wmjx
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-119
Updated
2026-11-02
NVD 7.5

A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An authenticated attacker could send crafted messages to the SPICE server causing a heap overflow leading to a crash or possible code execution.

Record
CVE-2016-9577
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Weakness
CWE-20, CWE-122, CWE-119
Updated
2026-11-02
OSVALPINE-CVE-2016-9577 8.8

A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An authenticated attacker could send crafted messages to the SPICE server causing a heap overflow leading to a crash or possible code execution.

Record
ALPINE-CVE-2016-9577
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVBELL-CVE-2016-9577 8.8

CVE-2016-9577 does not affect BellSoft software

Record
BELL-CVE-2016-9577
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 14 moreShow less
OSV 8.8

A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An authenticated attacker could send crafted messages to the SPICE server causing a heap overflow leading to a crash or possible code execution.

Record
CVE-2016-9577
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2016-9577 8.8

A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An authenticated attacker could send crafted messages to the SPICE server causing a heap overflow leading to a crash or possible code execution.

Record
DEBIAN-CVE-2016-9577
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2017:0253 7.5

Red Hat Security Advisory: spice-server security update

Record
RHSA-2017:0253
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2017:0254 7.5

Red Hat Security Advisory: spice security update

Record
RHSA-2017:0254
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2017:0549 7.5

Red Hat Security Advisory: redhat-virtualization-host security and bug fix update

Record
RHSA-2017:0549
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2017:0552 7.5

Red Hat Security Advisory: rhevm-appliance security and bug fix update

Record
RHSA-2017:0552
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2016-9577 8.8

A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An authenticated attacker could send crafted messages to the SPICE server causing a heap overflow leading to a crash or possible code execution.

Record
UBUNTU-CVE-2016-9577
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2017-0062 No score

Updated spice packages fix security vulnerability

An authenticated attacker could send crafted messages to the spice server causing a heap overflow leading to a crash or possible code execution. (CVE-2016-9577)

An attacker able to connect to the spice server could send crafted messages which would cause the process to crash. (CVE-2016-9578)

Record
MGASA-2017-0062
Updated
2026-11-02
OSVopenSUSE-SU-2024:11397-1 No score

libspice-server-devel-0.15.0-1.3 on GA media

These are all security issues fixed in the libspice-server-devel-0.15.0-1.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11397-1
Updated
2026-11-02
OSVSUSE-SU-2017:0392-1 No score

Security update for spice

This security update for spice fixes the following issues:

CVE-2016-9577: A buffer overflow in the spice server could have potentially been used by unauthenticated attackers to execute arbitrary code. (bsc#1023078) CVE-2016-9578: Unauthenticated attackers could have caused a denial of service via a crafted message. (bsc#1023079)

Record
SUSE-SU-2017:0392-1
Updated
2026-11-02
OSVSUSE-SU-2017:0393-1 No score

Security update for spice

This security update for spice fixes the following issues:

CVE-2016-9577: A buffer overflow in the spice server could have potentially been used by unauthenticated attackers to execute arbitrary code. (bsc#1023078) CVE-2016-9578: Unauthenticated attackers could have caused a denial of service via a crafted message. (bsc#1023079)

Record
SUSE-SU-2017:0393-1
Updated
2026-11-02
OSVSUSE-SU-2017:0396-1 No score

Security update for spice

This security update for spice fixes the following issues:

CVE-2016-9577: A buffer overflow in the spice server could have potentially been used by unauthenticated attackers to execute arbitrary code. (bsc#1023078) CVE-2016-9578: Unauthenticated attackers could have caused a denial of service via a crafted message. (bsc#1023079)

Record
SUSE-SU-2017:0396-1
Updated
2026-11-02
OSVSUSE-SU-2017:0400-1 No score

Security update for spice

This security update for spice fixes the following issues:

CVE-2016-9577: A buffer overflow in the spice server could have potentially been used by unauthenticated attackers to execute arbitrary code. (bsc#1023078) CVE-2016-9578: Unauthenticated attackers could have caused a denial of service via a crafted message. (bsc#1023079)

Record
SUSE-SU-2017:0400-1
Updated
2026-11-02
OSVUSN-3202-1 No score

spice vulnerabilities

Frediano Ziglio discovered that Spice incorrectly handled certain client messages. A remote attacker could use this issue to cause Spice to crash, resulting in a denial of service, or possibly execute arbitrary code.

Record
USN-3202-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
spice
Alpine:v3.10
 before 0.12.8-r3
0.12.8-r3
spice
Alpine:v3.11
 before 0.12.8-r3
0.12.8-r3
spice
Alpine:v3.12
 before 0.12.8-r3
0.12.8-r3
spice
Alpine:v3.13
 before 0.12.8-r3
0.12.8-r3
spice
Alpine:v3.14
 before 0.12.8-r3
0.12.8-r3
spice
Alpine:v3.15
 before 0.12.8-r3
0.12.8-r3
spice
Alpine:v3.16
 before 0.12.8-r3
0.12.8-r3
spice
Alpine:v3.17
 before 0.12.8-r3
0.12.8-r3
spice
Alpine:v3.18
 before 0.12.8-r3
0.12.8-r3
spice
Alpine:v3.19
 before 0.12.8-r3
0.12.8-r3
Show 64 moreShow less
Affected packages
PackageAffectedFixed
spice
Alpine:v3.20
 before 0.12.8-r3
0.12.8-r3
spice
Alpine:v3.21
 before 0.12.8-r3
0.12.8-r3
spice
Alpine:v3.22
 before 0.12.8-r3
0.12.8-r3
spice
Alpine:v3.23
 before 0.12.8-r3
0.12.8-r3
spice
Alpine:v3.24
 before 0.12.8-r3
0.12.8-r3
spice
Alpine:v3.7
 before 0.12.8-r3
0.12.8-r3
spice
Alpine:v3.8
 before 0.12.8-r3
0.12.8-r3
spice
Alpine:v3.9
 before 0.12.8-r3
0.12.8-r3
spice
Debian:12
 before 0.12.8-2.1
0.12.8-2.1
spice
Debian:13
 before 0.12.8-2.1
0.12.8-2.1
spice
Debian:14
 before 0.12.8-2.1
0.12.8-2.1
spice
Debian:7
 before 0.11.0-1+deb7u4, plus listed versions
0.11.0-10.11.0-1+deb7u10.11.0-1+deb7u20.11.0-1+deb7u3
0.11.0-1+deb7u4
spice
Debian:8
 before 0.12.5-1+deb8u4, plus listed versions
0.12.5-10.12.5-1+deb8u10.12.5-1+deb8u20.12.5-1+deb8u3
0.12.5-1+deb8u4
spice
Mageia:5
 before 0.12.5-2.4.mga5
0.12.5-2.4.mga5
spice-server
Red Hat:enterprise_linux:6::client
 before 0:0.12.4-13.el6_8.2
0:0.12.4-13.el6_8.2
spice-server-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:0.12.4-13.el6_8.2
0:0.12.4-13.el6_8.2
spice-server-devel
Red Hat:enterprise_linux:6::client
 before 0:0.12.4-13.el6_8.2
0:0.12.4-13.el6_8.2
spice-server
Red Hat:enterprise_linux:6::computenode
 before 0:0.12.4-13.el6_8.2
0:0.12.4-13.el6_8.2
spice-server-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:0.12.4-13.el6_8.2
0:0.12.4-13.el6_8.2
spice-server-devel
Red Hat:enterprise_linux:6::computenode
 before 0:0.12.4-13.el6_8.2
0:0.12.4-13.el6_8.2
spice-server
Red Hat:enterprise_linux:6::server
 before 0:0.12.4-13.el6_8.2
0:0.12.4-13.el6_8.2
spice-server-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:0.12.4-13.el6_8.2
0:0.12.4-13.el6_8.2
spice-server-devel
Red Hat:enterprise_linux:6::server
 before 0:0.12.4-13.el6_8.2
0:0.12.4-13.el6_8.2
spice-server
Red Hat:enterprise_linux:6::workstation
 before 0:0.12.4-13.el6_8.2
0:0.12.4-13.el6_8.2
spice-server-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:0.12.4-13.el6_8.2
0:0.12.4-13.el6_8.2
spice-server-devel
Red Hat:enterprise_linux:6::workstation
 before 0:0.12.4-13.el6_8.2
0:0.12.4-13.el6_8.2
spice
Red Hat:enterprise_linux:7::client
 before 0:0.12.4-20.el7_3
0:0.12.4-20.el7_3
spice-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:0.12.4-20.el7_3
0:0.12.4-20.el7_3
spice-server
Red Hat:enterprise_linux:7::client
 before 0:0.12.4-20.el7_3
0:0.12.4-20.el7_3
spice-server-devel
Red Hat:enterprise_linux:7::client
 before 0:0.12.4-20.el7_3
0:0.12.4-20.el7_3
spice
Red Hat:enterprise_linux:7::computenode
 before 0:0.12.4-20.el7_3
0:0.12.4-20.el7_3
spice-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:0.12.4-20.el7_3
0:0.12.4-20.el7_3
spice-server
Red Hat:enterprise_linux:7::computenode
 before 0:0.12.4-20.el7_3
0:0.12.4-20.el7_3
spice-server-devel
Red Hat:enterprise_linux:7::computenode
 before 0:0.12.4-20.el7_3
0:0.12.4-20.el7_3
spice
Red Hat:enterprise_linux:7::server
 before 0:0.12.4-20.el7_3
0:0.12.4-20.el7_3
spice-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:0.12.4-20.el7_3
0:0.12.4-20.el7_3
spice-server
Red Hat:enterprise_linux:7::server
 before 0:0.12.4-20.el7_3
0:0.12.4-20.el7_3
spice-server-devel
Red Hat:enterprise_linux:7::server
 before 0:0.12.4-20.el7_3
0:0.12.4-20.el7_3
spice
Red Hat:enterprise_linux:7::workstation
 before 0:0.12.4-20.el7_3
0:0.12.4-20.el7_3
spice-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:0.12.4-20.el7_3
0:0.12.4-20.el7_3
spice-server
Red Hat:enterprise_linux:7::workstation
 before 0:0.12.4-20.el7_3
0:0.12.4-20.el7_3
spice-server-devel
Red Hat:enterprise_linux:7::workstation
 before 0:0.12.4-20.el7_3
0:0.12.4-20.el7_3
redhat-virtualization-host
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.0-20170307.1.el7_3
0:4.0-20170307.1.el7_3
redhat-virtualization-host-image-update
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.0-20170307.1.el7_3
0:4.0-20170307.1.el7_3
imgbased
Red Hat:enterprise_linux:7::hypervisor
 before 0:0.8.16-0.1.el7ev
0:0.8.16-0.1.el7ev
redhat-release-virtualization-host
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.0-7.1.el7
0:4.0-7.1.el7
redhat-virtualization-host-image-update-placeholder
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.0-7.1.el7
0:4.0-7.1.el7
rhevm-appliance
Red Hat:enterprise_linux:7::hypervisor
 before 1:4.0.20170307.0-1.el7ev
1:4.0.20170307.0-1.el7ev
spice
SUSE:Linux Enterprise Desktop 12 SP2
 before 0.12.7-8.1
0.12.7-8.1
spice
SUSE:Linux Enterprise Software Development Kit 12 SP2
 before 0.12.7-8.1
0.12.7-8.1
spice
SUSE:Linux Enterprise Server 12 SP2
 before 0.12.7-8.1
0.12.7-8.1
spice
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 0.12.7-8.1
0.12.7-8.1
spice
SUSE:Linux Enterprise Server for SAP Applications 12
 before 0.12.4-8.12.1
0.12.4-8.12.1
spice
SUSE:Linux Enterprise Server 12-LTSS
 before 0.12.4-8.12.1
0.12.4-8.12.1
spice
SUSE:Linux Enterprise Software Development Kit 11 SP4
 before 0.12.4-8.1
0.12.4-8.1
spice
SUSE:Linux Enterprise Server 11 SP4
 before 0.12.4-8.1
0.12.4-8.1
spice
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 0.12.4-8.1
0.12.4-8.1
spice
SUSE:Linux Enterprise Desktop 12 SP1
 before 0.12.5-7.1
0.12.5-7.1
spice
SUSE:Linux Enterprise Software Development Kit 12 SP1
 before 0.12.5-7.1
0.12.5-7.1
spice
SUSE:Linux Enterprise Server 12 SP1
 before 0.12.5-7.1
0.12.5-7.1
spice
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 0.12.5-7.1
0.12.5-7.1
spice
Ubuntu:14.04:LTS
 before 0.12.4-0nocelt2ubuntu1.4, plus listed versions
0.12.4-0nocelt10.12.4-0nocelt1.10.12.4-0nocelt1.1ubuntu10.12.4-0nocelt20.12.4-0nocelt2ubuntu10.12.4-0nocelt2ubuntu1.10.12.4-0nocelt2ubuntu1.20.12.4-0nocelt2ubuntu1.3
0.12.4-0nocelt2ubuntu1.4
spice
Ubuntu:16.04:LTS
 before 0.12.6-4ubuntu0.2, plus listed versions
0.12.5-1.1ubuntu20.12.6-40.12.6-4ubuntu0.1
0.12.6-4ubuntu0.2
spice
openSUSE:Tumbleweed
 before 0.15.0-1.3
0.15.0-1.3

History

History
WhenChangedSources
2026-11-03aliases, productsEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 52 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open