Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:1906-1

Опубликовано: 08 июн. 2021
Источник: suse-cvrf

Описание

Security update for spice

This update for spice fixes the following issues:

  • CVE-2021-20201: client initiated renegotiation causing denial of service (bsc#1181686)

Список пакетов

HPE Helion OpenStack 8
libspice-server1-0.12.8-18.1
SUSE Linux Enterprise Server 12 SP3-BCL
libspice-server1-0.12.8-18.1
SUSE Linux Enterprise Server 12 SP3-LTSS
libspice-server1-0.12.8-18.1
SUSE Linux Enterprise Server 12 SP4-LTSS
libspice-server1-0.12.8-18.1
SUSE Linux Enterprise Server 12 SP5
libspice-server1-0.12.8-18.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
libspice-server1-0.12.8-18.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
libspice-server1-0.12.8-18.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
libspice-server1-0.12.8-18.1
SUSE Linux Enterprise Software Development Kit 12 SP5
libspice-server-devel-0.12.8-18.1
SUSE OpenStack Cloud 8
libspice-server1-0.12.8-18.1
SUSE OpenStack Cloud 9
libspice-server1-0.12.8-18.1
SUSE OpenStack Cloud Crowbar 8
libspice-server1-0.12.8-18.1
SUSE OpenStack Cloud Crowbar 9
libspice-server1-0.12.8-18.1

Ссылки

Описание

A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection.

Затронутые продукты
HPE Helion OpenStack 8:libspice-server1-0.12.8-18.1
SUSE Linux Enterprise Server 12 SP3-BCL:libspice-server1-0.12.8-18.1
SUSE Linux Enterprise Server 12 SP3-LTSS:libspice-server1-0.12.8-18.1
SUSE Linux Enterprise Server 12 SP4-LTSS:libspice-server1-0.12.8-18.1
Ссылки