SUSE-SU-2021:14744-1
- Source
- https://www.suse.com/support/update/announcement/2021/suse-su-202114744-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:14744-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2021:14744-1
- Related
- Published
- 2021-06-08T17:31:32Z
- Modified
- 2021-06-08T17:31:32Z
- Summary
- Security update for spice
- Details
-
This update for spice fixes the following issues:
- CVE-2021-20201: client initiated renegotiation causing denial of service (bsc#1181686)
- CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC decoding code (bsc#1177158)
- CVE-2016-2150: Fixed a guest escape using crafted primary surface parameters (bsc#982386)
- References
-
- https://www.suse.com/support/update/announcement/2021/suse-su-202114744-1/
- https://bugzilla.suse.com/1177158
- https://bugzilla.suse.com/1181686
- https://bugzilla.suse.com/982386
- https://www.suse.com/security/cve/CVE-2016-2150
- https://www.suse.com/security/cve/CVE-2020-14355
- https://www.suse.com/security/cve/CVE-2021-20201