CVE-2021-20201
Fixed in a distro release EPSS 3%
A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection.
Products: spice_project spice, redhat enterprise_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | spice-server | 0.14.3-4.el8 |
| AlmaLinux 8 | spice-server-devel | 0.14.3-4.el8 |
| Alpine 3.10 | spice | 0.14.2-r1 |
| Alpine 3.11 | spice | 0.14.2-r2 |
| Alpine 3.12 | spice | 0.14.3-r1 |
| Alpine 3.13 | spice | 0.14.3-r1 |
| Alpine 3.14 | spice | 0.14.3-r1 |
| Alpine 3.15 | spice | 0.14.3-r1 |
| Alpine 3.16 | spice | 0.14.3-r1 |
| Alpine 3.17 | spice | 0.14.3-r1 |
| Alpine 3.18 | spice | 0.14.3-r1 |
| Alpine 3.19 | spice | 0.14.3-r1 |
| Alpine 3.20 | spice | 0.14.3-r1 |
| Alpine 3.21 | spice | 0.14.3-r1 |
| Alpine 3.22 | spice | 0.14.3-r1 |
| Alpine 3.23 | spice | 0.14.3-r1 |
| Alpine 3.24 | spice | 0.14.3-r1 |
| Arch Linux | spice | 0.15.0-1 |
| Debian 12 | spice | 0.14.3-2.1 |
| Debian 13 | spice | 0.14.3-2.1 |
| Debian 14 | spice | 0.14.3-2.1 |
| Red Hat Enterprise Linux 8 | spice | 0:0.14.3-4.el8 |
| Red Hat Enterprise Linux 8 | spice-debugsource | 0:0.14.3-4.el8 |
| Red Hat Enterprise Linux 8 | spice-server | 0:0.14.3-4.el8 |
| Red Hat Enterprise Linux 8 | spice-server-debuginfo | 0:0.14.3-4.el8 |
| Red Hat Enterprise Linux 8 | spice-server-devel | 0:0.14.3-4.el8 |
| Rocky Linux 8 | spice | 0:0.14.3-4.el8 |
| SUSE Enterprise Storage 6 | spice | 0.14.1-4.3.1 |
| SUSE HPE Helion OpenStack 8 | spice | 0.12.8-18.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | spice | 0.14.1-4.3.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | spice | 0.14.1-4.3.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | spice | 0.14.0-4.9.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | spice | 0.14.0-4.9.1 |
| SUSE Linux Enterprise Micro 5.0 | spice | 0.14.2-3.6.1 |
| SUSE Linux Enterprise Micro 5.2 | spice | 0.14.3-150300.3.3.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP2 | spice | 0.14.2-3.6.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP3 | spice | 0.14.3-150300.3.3.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | spice | 0.12.4-21.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | spice | 0.12.7-10.12.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | spice | 0.12.8-18.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | spice | 0.12.8-18.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | spice | 0.12.8-18.1 |
| SUSE Linux Enterprise Server 12 SP5 | spice | 0.12.8-18.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | spice | 0.14.1-4.3.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | spice | 0.14.1-4.3.1 |
| SUSE Linux Enterprise Server 15-LTSS | spice | 0.14.0-4.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | spice | 0.12.8-18.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | spice | 0.12.8-18.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | spice | 0.12.8-18.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | spice | 0.14.0-4.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | spice | 0.14.1-4.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | spice | 0.12.8-18.1 |
| SUSE Manager Proxy 4.0 | spice | 0.14.1-4.3.1 |
| SUSE Manager Retail Branch Server 4.0 | spice | 0.14.1-4.3.1 |
| SUSE Manager Server 4.0 | spice | 0.14.1-4.3.1 |
| SUSE OpenStack Cloud 8 | spice | 0.12.8-18.1 |
| SUSE OpenStack Cloud 9 | spice | 0.12.8-18.1 |
| SUSE OpenStack Cloud Crowbar 8 | spice | 0.12.8-18.1 |
| SUSE OpenStack Cloud Crowbar 9 | spice | 0.12.8-18.1 |
| Ubuntu 16.04 LTS | spice | no fix |
| Ubuntu 18.04 LTS | spice | no fix |
| Ubuntu 20.04 LTS | spice | no fix |
| Ubuntu Pro 14.04 LTS | spice | no fix |
| openSUSE Leap 15.2 | spice | 0.14.2-lp152.2.6.1 |
| openSUSE Leap 15.3 | spice | 0.14.3-150300.3.3.1 |
| openSUSE Leap Micro 5.2 | spice | 0.14.3-150300.3.3.1 |
| openSUSE Tumbleweed | spice | 0.15.2-2.1 |
| openSUSE Tumbleweed | spice-gtk | 0.41-3.1 |