VYPR

rpm package

suse/spice&distro=SUSE Manager Server 4.0

pkg:rpm/suse/spice&distro=SUSE%20Manager%20Server%204.0

Vulnerabilities (2)

  • CVE-2021-20201May 28, 2021
    affected < 0.14.1-4.3.1fixed 0.14.1-4.3.1

    A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection.

  • CVE-2020-14355Oct 7, 2020
    affected < 0.14.1-4.3.1fixed 0.14.1-4.3.1

    Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPICE client (spice-gtk) and server are affected by these flaws. These flaws allow a malicious client or server to send speci