Detections
Analytics
Alpine: multiple spice packages: security update to 0.12.8-r3
high Tenable Cloud Security Plugin ID 424481
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An authenticated
attacker could send crafted messages to the SPICE server causing a heap overflow leading to a crash or
possible code execution. (CVE-2016-9577)
- A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An attacker able
to connect to the SPICE server could send crafted messages which would cause the process to crash.
(CVE-2016-9578)
- spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted
messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.
(CVE-2017-7506)
See Also
https://security.alpinelinux.org/vuln/CVE-2016-9577
Plugin Details
Severity: High
ID: 424481
Version: Revision 1.12
Type: Local
Published: 4/4/2025
Updated: 7/2/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 4.9
Percentile: 57.12
CVSS v2
Risk Factor: Medium
Base Score: 6.5
Temporal Score: 4.8
Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P
CVSS Score Source: CVE-2017-7506
CVSS v3
Risk Factor: High
Base Score: 8.8
Temporal Score: 7.7
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 2/5/2017