CVE:CVE-2016-2150
CNNVD:CNNVD-201606-183
Red Hat SPICE是美国红帽（Red Hat）公司的一个企业虚拟化桌面版所使用的自适应远程呈现开源协议，它主要用于将用户与其虚拟桌面进行连接，能够提供与物理桌面完全相同的最终用户体验。
Red Hat SPICE中存在安全漏洞。本地攻击者可借助特制的primary surface参数利用该漏洞读取或写入任意主机内存位置。
solution:Upgrade redhat enterprise_linux to a higher version than 7.0,6.0,and avoid the version 7.0,6.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,6.0,and avoid the version 7.0,6.0; Upgrade redhat enterprise_linux_hpc_node_eus to a higher version than 7.2,and avoid the version 7.2; Upgrade redhat enterprise_linux_server to a higher version than 7.0,6.0,and avoid the version 7.0,6.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.2,and avoid the version 7.2; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.2,and avoid the version 7.2; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,6.0,and avoid the version 7.0,6.0; Upgrade opensuse leap to a higher version than 42.1,and avoid the version 42.1; Upgrade opensuse opensuse to a higher version than 13.2,and avoid the version 13.2; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade spice_project spice to a higher version than -