VYPR

rpm package

suse/spice&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS

pkg:rpm/suse/spice&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS

Vulnerabilities (2)

  • CVE-2021-20201May 28, 2021
    affected < 0.14.0-4.9.1fixed 0.14.0-4.9.1

    A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection.

  • CVE-2020-14355Oct 7, 2020
    affected < 0.14.0-4.9.1fixed 0.14.0-4.9.1

    Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPICE client (spice-gtk) and server are affected by these flaws. These flaws allow a malicious client or server to send speci