VYPR

rpm package

opensuse/spice&distro=openSUSE Leap 15.2

pkg:rpm/opensuse/spice&distro=openSUSE%20Leap%2015.2

Vulnerabilities (2)

  • CVE-2021-20201May 28, 2021
    affected < 0.14.2-lp152.2.6.1fixed 0.14.2-lp152.2.6.1

    A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection.

  • CVE-2020-14355Oct 7, 2020
    affected < 0.14.2-lp152.2.3.1fixed 0.14.2-lp152.2.3.1

    Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPICE client (spice-gtk) and server are affected by these flaws. These flaws allow a malicious client or server to send speci