CVE-2020-14355
Fixed in a distro release EPSS 3%
Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPICE client (spice-gtk) and server are affected by these flaws. These flaws allow a malicious client or server to send specially crafted messages that, when processed by the QUIC image compression algorithm, result in a process crash or potential code execution.
Products: spice_project spice, redhat openstack, canonical ubuntu_linux, debian_linux, opensuse leap, redhat enterprise_linux, redhat enterprise_linux_aus, redhat enterprise_linux_eus, redhat enterprise_linux_tus, redhat enterprise_linux_update_services_for_sap_solutions
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.15 | spice | 0.15.0-r0 |
| Alpine 3.16 | spice | 0.15.0-r0 |
| Alpine 3.17 | spice | 0.15.0-r0 |
| Alpine 3.18 | spice | 0.15.0-r0 |
| Alpine 3.19 | spice | 0.15.0-r0 |
| Alpine 3.20 | spice | 0.15.0-r0 |
| Alpine 3.21 | spice | 0.15.0-r0 |
| Alpine 3.22 | spice | 0.15.0-r0 |
| Alpine 3.23 | spice | 0.15.0-r0 |
| Alpine 3.24 | spice | 0.15.0-r0 |
| Amazon Linux 2 | spice-glib | 0.35-5.amzn2.1 |
| Amazon Linux 2 | spice-glib-devel | 0.35-5.amzn2.1 |
| Amazon Linux 2 | spice-gtk-tools | 0.35-5.amzn2.1 |
| Amazon Linux 2 | spice-gtk3 | 0.35-5.amzn2.1 |
| Amazon Linux 2 | spice-gtk3-devel | 0.35-5.amzn2.1 |
| Amazon Linux 2 | spice-gtk3-vala | 0.35-5.amzn2.1 |
| Amazon Linux 2 | spice-server | 0.14.0-9.amzn2.1 |
| Amazon Linux 2 | spice-server-devel | 0.14.0-9.amzn2.1 |
| Arch Linux | spice | 0.15.0-1 |
| Arch Linux | spice-gtk | 0.39-1 |
| Debian 10 | spice | 0.14.0-1.3+deb10u1 |
| Debian 12 | spice | 0.14.3-2 |
| Debian 12 | spice-gtk | 0.39-1 |
| Debian 13 | spice | 0.14.3-2 |
| Debian 13 | spice-gtk | 0.39-1 |
| Debian 14 | spice | 0.14.3-2 |
| Debian 14 | spice-gtk | 0.39-1 |
| Debian 9 | spice | 0.12.8-2.1+deb9u4 |
| Debian 9 | spice-gtk | 0.33-3.3+deb9u2 |
| Red Hat Enterprise Linux 7 | spice | 0:0.14.0-9.el7_9.1 |
| Red Hat Enterprise Linux 7 | spice-debuginfo | 0:0.14.0-9.el7_9.1 |
| Red Hat Enterprise Linux 7 | spice-glib | 0:0.35-5.el7_9.1 |
| Red Hat Enterprise Linux 7 | spice-glib-devel | 0:0.35-5.el7_9.1 |
| Red Hat Enterprise Linux 7 | spice-gtk | 0:0.35-5.el7_9.1 |
| Red Hat Enterprise Linux 7 | spice-gtk-debuginfo | 0:0.35-5.el7_9.1 |
| Red Hat Enterprise Linux 7 | spice-gtk-tools | 0:0.35-5.el7_9.1 |
| Red Hat Enterprise Linux 7 | spice-gtk3 | 0:0.35-5.el7_9.1 |
| Red Hat Enterprise Linux 7 | spice-gtk3-devel | 0:0.35-5.el7_9.1 |
| Red Hat Enterprise Linux 7 | spice-gtk3-vala | 0:0.35-5.el7_9.1 |
| Red Hat Enterprise Linux 7 | spice-server | 0:0.14.0-9.el7_9.1 |
| Red Hat Enterprise Linux 7 | spice-server-devel | 0:0.14.0-9.el7_9.1 |
| Red Hat Enterprise Linux 8 | spice | 0:0.14.2-1.el8_2.1 |
| Red Hat Enterprise Linux 8 | spice-debugsource | 0:0.14.2-1.el8_2.1 |
| Red Hat Enterprise Linux 8 | spice-glib | 0:0.37-1.el8_2.2 |
| Red Hat Enterprise Linux 8 | spice-glib-debuginfo | 0:0.37-1.el8_2.2 |
| Red Hat Enterprise Linux 8 | spice-glib-devel | 0:0.37-1.el8_2.2 |
| Red Hat Enterprise Linux 8 | spice-gtk | 0:0.37-1.el8_2.2 |
| Red Hat Enterprise Linux 8 | spice-gtk-debuginfo | 0:0.37-1.el8_2.2 |
| Red Hat Enterprise Linux 8 | spice-gtk-debugsource | 0:0.37-1.el8_2.2 |
| Red Hat Enterprise Linux 8 | spice-gtk-tools | 0:0.37-1.el8_2.2 |
| Red Hat Enterprise Linux 8 | spice-gtk-tools-debuginfo | 0:0.37-1.el8_2.2 |
| Red Hat Enterprise Linux 8 | spice-gtk3 | 0:0.37-1.el8_2.2 |
| Red Hat Enterprise Linux 8 | spice-gtk3-debuginfo | 0:0.37-1.el8_2.2 |
| Red Hat Enterprise Linux 8 | spice-gtk3-devel | 0:0.37-1.el8_2.2 |
| Red Hat Enterprise Linux 8 | spice-gtk3-vala | 0:0.37-1.el8_2.2 |
| Red Hat Enterprise Linux 8 | spice-server | 0:0.14.2-1.el8_2.1 |
| Red Hat Enterprise Linux 8 | spice-server-debuginfo | 0:0.14.2-1.el8_2.1 |
| Red Hat Enterprise Linux 8 | spice-server-devel | 0:0.14.2-1.el8_2.1 |
| Red Hat rhel e4s 8.0 | spice | 0:0.14.0-7.el8_0.1 |
| Red Hat rhel e4s 8.0 | spice-debugsource | 0:0.14.0-7.el8_0.1 |
| Red Hat rhel e4s 8.0 | spice-glib | 0:0.35-7.el8_0.1 |
| Red Hat rhel e4s 8.0 | spice-glib-debuginfo | 0:0.35-7.el8_0.1 |
| Red Hat rhel e4s 8.0 | spice-glib-devel | 0:0.35-7.el8_0.1 |
| Red Hat rhel e4s 8.0 | spice-gtk | 0:0.35-7.el8_0.1 |
| Red Hat rhel e4s 8.0 | spice-gtk-debuginfo | 0:0.35-7.el8_0.1 |
| Red Hat rhel e4s 8.0 | spice-gtk-debugsource | 0:0.35-7.el8_0.1 |
| Red Hat rhel e4s 8.0 | spice-gtk-tools | 0:0.35-7.el8_0.1 |
| Red Hat rhel e4s 8.0 | spice-gtk-tools-debuginfo | 0:0.35-7.el8_0.1 |
| Red Hat rhel e4s 8.0 | spice-gtk3 | 0:0.35-7.el8_0.1 |
| Red Hat rhel e4s 8.0 | spice-gtk3-debuginfo | 0:0.35-7.el8_0.1 |
| Red Hat rhel e4s 8.0 | spice-gtk3-devel | 0:0.35-7.el8_0.1 |
| Red Hat rhel e4s 8.0 | spice-gtk3-vala | 0:0.35-7.el8_0.1 |
| Red Hat rhel e4s 8.0 | spice-server | 0:0.14.0-7.el8_0.1 |
| Red Hat rhel e4s 8.0 | spice-server-debuginfo | 0:0.14.0-7.el8_0.1 |
| Red Hat rhel eus 8.1 | spice | 0:0.14.2-1.el8_1.1 |
| Red Hat rhel eus 8.1 | spice-debugsource | 0:0.14.2-1.el8_1.1 |
| Red Hat rhel eus 8.1 | spice-glib | 0:0.37-1.el8_1.2 |
| Red Hat rhel eus 8.1 | spice-glib-debuginfo | 0:0.37-1.el8_1.2 |
| Red Hat rhel eus 8.1 | spice-glib-devel | 0:0.37-1.el8_1.2 |
| Red Hat rhel eus 8.1 | spice-gtk | 0:0.37-1.el8_1.2 |
| Red Hat rhel eus 8.1 | spice-gtk-debuginfo | 0:0.37-1.el8_1.2 |
| Red Hat rhel eus 8.1 | spice-gtk-debugsource | 0:0.37-1.el8_1.2 |
| Red Hat rhel eus 8.1 | spice-gtk-tools | 0:0.37-1.el8_1.2 |
| Red Hat rhel eus 8.1 | spice-gtk-tools-debuginfo | 0:0.37-1.el8_1.2 |
| Red Hat rhel eus 8.1 | spice-gtk3 | 0:0.37-1.el8_1.2 |
| Red Hat rhel eus 8.1 | spice-gtk3-debuginfo | 0:0.37-1.el8_1.2 |
| Red Hat rhel eus 8.1 | spice-gtk3-devel | 0:0.37-1.el8_1.2 |
| Red Hat rhel eus 8.1 | spice-gtk3-vala | 0:0.37-1.el8_1.2 |
| Red Hat rhel eus 8.1 | spice-server | 0:0.14.2-1.el8_1.1 |
| Red Hat rhel eus 8.1 | spice-server-debuginfo | 0:0.14.2-1.el8_1.1 |
| Red Hat rhel eus 8.1 | spice-server-devel | 0:0.14.2-1.el8_1.1 |
| SUSE Enterprise Storage 5 | spice | 0.12.8-15.1 |
| SUSE Enterprise Storage 5 | spice-gtk | 0.33-3.9.1 |
| SUSE Enterprise Storage 6 | spice | 0.14.1-4.3.1 |
| SUSE Enterprise Storage 6 | spice-gtk | 0.35-3.3.1 |
| SUSE HPE Helion OpenStack 8 | spice | 0.12.8-15.1 |
| SUSE HPE Helion OpenStack 8 | spice-gtk | 0.33-3.9.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | spice | 0.14.1-4.3.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | spice-gtk | 0.35-3.3.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | spice | 0.14.1-4.3.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | spice-gtk | 0.35-3.3.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | spice | 0.14.0-4.9.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | spice-gtk | 0.34-3.6.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | spice | 0.14.0-4.9.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | spice-gtk | 0.34-3.6.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | spice-gtk | 0.37-3.3.2 |
| SUSE Linux Enterprise Module for Server Applications 15 SP2 | spice | 0.14.2-3.3.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP2 | spice-gtk | 0.37-3.3.2 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | spice | 0.12.4-21.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | spice | 0.12.7-10.12.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | spice-gtk | 0.31-9.13.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | spice | 0.12.8-15.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | spice-gtk | 0.33-3.9.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | spice | 0.12.8-15.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | spice-gtk | 0.33-3.9.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | spice | 0.12.8-15.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | spice-gtk | 0.33-3.9.1 |
| SUSE Linux Enterprise Server 12 SP5 | spice | 0.12.8-15.1 |
| SUSE Linux Enterprise Server 12 SP5 | spice-gtk | 0.33-3.9.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | spice | 0.14.1-4.3.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | spice-gtk | 0.35-3.3.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | spice | 0.14.1-4.3.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | spice-gtk | 0.35-3.3.1 |
| SUSE Linux Enterprise Server 15-LTSS | spice | 0.14.0-4.9.1 |
| SUSE Linux Enterprise Server 15-LTSS | spice-gtk | 0.34-3.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | spice | 0.12.8-15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | spice-gtk | 0.33-3.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | spice | 0.12.8-15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | spice-gtk | 0.33-3.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | spice | 0.12.8-15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | spice-gtk | 0.33-3.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | spice | 0.14.0-4.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | spice-gtk | 0.34-3.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | spice | 0.14.1-4.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | spice-gtk | 0.35-3.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | spice | 0.12.8-15.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | spice-gtk | 0.33-3.9.1 |
| SUSE Manager Proxy 4.0 | spice | 0.14.1-4.3.1 |
| SUSE Manager Proxy 4.0 | spice-gtk | 0.35-3.3.1 |
| SUSE Manager Retail Branch Server 4.0 | spice | 0.14.1-4.3.1 |
| SUSE Manager Retail Branch Server 4.0 | spice-gtk | 0.35-3.3.1 |
| SUSE Manager Server 4.0 | spice | 0.14.1-4.3.1 |
| SUSE Manager Server 4.0 | spice-gtk | 0.35-3.3.1 |
| SUSE OpenStack Cloud 8 | spice | 0.12.8-15.1 |
| SUSE OpenStack Cloud 8 | spice-gtk | 0.33-3.9.1 |
| SUSE OpenStack Cloud 9 | spice | 0.12.8-15.1 |
| SUSE OpenStack Cloud 9 | spice-gtk | 0.33-3.9.1 |
| SUSE OpenStack Cloud Crowbar 8 | spice | 0.12.8-15.1 |
| SUSE OpenStack Cloud Crowbar 8 | spice-gtk | 0.33-3.9.1 |
| SUSE OpenStack Cloud Crowbar 9 | spice | 0.12.8-15.1 |
| SUSE OpenStack Cloud Crowbar 9 | spice-gtk | 0.33-3.9.1 |
| Ubuntu 16.04 LTS | spice | 0.12.6-4ubuntu0.5 |
| Ubuntu 16.04 LTS | spice-gtk | no fix |
| Ubuntu 18.04 LTS | spice | 0.14.0-1ubuntu2.5 |
| Ubuntu 18.04 LTS | spice-gtk | no fix |
| Ubuntu 20.04 LTS | spice | 0.14.2-4ubuntu3.1 |
| Ubuntu 20.04 LTS | spice-gtk | no fix |
| Ubuntu 22.04 LTS | spice-gtk | no fix |
| Ubuntu 24.04 LTS | spice-gtk | no fix |
| Ubuntu 25.10 | spice-gtk | no fix |
| Ubuntu 26.04 LTS | spice-gtk | no fix |
| Ubuntu 26.10 | spice-gtk | no fix |
| Ubuntu Pro 14.04 LTS | spice | 0.12.4-0nocelt2ubuntu1.8+esm1 |
| openSUSE Leap 15.2 | spice | 0.14.2-lp152.2.3.1 |
| openSUSE Leap 15.2 | spice-gtk | 0.37-lp152.2.3.1 |
| openSUSE Tumbleweed | spice | 0.15.0-1.3 |
| openSUSE Tumbleweed | spice-gtk | 0.39-1.8 |