A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection.
References
| Link | Resource |
|---|---|
| https://blog.qualys.com/product-tech/2011/10/31/tls-renegotiation-and-denial-of-service-attacks | Exploit Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=1921846 | Issue Tracking Third Party Advisory |
| https://security.gentoo.org/glsa/202208-10 | Third Party Advisory |
Configurations
History
21 Oct 2022, 20:02
| Type | Values Removed | Values Added |
|---|---|---|
| References | (GENTOO) https://security.gentoo.org/glsa/202208-10 - Third Party Advisory | |
| CWE | NVD-CWE-Other |
10 Aug 2022, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
04 Jun 2021, 15:34
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 5.3 |
02 Jun 2021, 15:35
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 7.5 |
| CPE | cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* cpe:2.3:a:spice_project:spice:*:*:*:*:*:*:*:* |
|
| References | (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=1921846 - Issue Tracking, Third Party Advisory | |
| References | (MISC) https://blog.qualys.com/product-tech/2011/10/31/tls-renegotiation-and-denial-of-service-attacks - Exploit, Third Party Advisory |
28 May 2021, 11:37
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-400 |
28 May 2021, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-05-28 11:15
Updated : 2023-12-10 13:55
NVD link : CVE-2021-20201
Mitre link : CVE-2021-20201
CVE.ORG link : CVE-2021-20201
JSON object : View
Products Affected
spice_project
- spice
redhat
- enterprise_linux
CWE