{"action":"Upgrade spice to 0.12.5-1.2 or later.","affected":[{"fixed":"0.12.5-1.2","introduced":"0"}],"component":"spice","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["0.12.5-1.2"],"id":"tcs_01M5NB6PRR4ED2HR0CCQPS0FR5","modified_at":"2026-09-09T06:47:25.610632217Z","published_at":"2015-09-08T15:59:02.720Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2015-3247","https://security-tracker.debian.org/tracker/CVE-2015-3247"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2015-3247#Debian:13/spice","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2015-3247"}],"summary":"Race condition in the worker_update_monitors_config function in SPICE 0.12.4 allows a remote authenticated guest user to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or"}