A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - spice: multiple buffer overflow vulnerabilities in QUIC decoding code (CVE-2020-14355)

  - An issue was discovered in spice-server spice-server-0.14.0-6.el7_6.1.x86_64 of Redhat's VDI product.
    There is a security vulnerablility that can restart KVMvirtual machine without any authorization. It is     not yet known if there will be other other effects. (CVE-2020-23793)

  - A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers     to cause a denial of service (CPU consumption) by performing many renegotiations within a single     connection. (CVE-2021-20201)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - spice: Improper input validation in function async_READ_handler (CVE-2020-23793)

  - spice: Client initiated renegotiation denial of service (CVE-2021-20201)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:1924 advisory.

  - A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers     to cause a denial of service (CPU consumption) by performing many renegotiations within a single     connection. (CVE-2021-20201)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2881-1 advisory.

  - A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers     to cause a denial of service (CPU consumption) by performing many renegotiations within a single     connection. (CVE-2021-20201)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202208-10 (Spice Server: Multiple Vulnerabilities)

  - A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers     to cause a denial of service (CPU consumption) by performing many renegotiations within a single     connection. (CVE-2021-20201)

  -  Please review the referenced CVE identifiers for details.  (CVE-2021-14355)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the spice package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers     to cause a denial of service (CPU consumption) by performing many renegotiations within a single     connection. (CVE-2021-20201)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:1924 advisory.

  - A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers     to cause a denial of service (CPU consumption) by performing many renegotiations within a single     connection. (CVE-2021-20201)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the spice package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers     to cause a denial of service (CPU consumption) by performing many renegotiations within a single     connection. (CVE-2021-20201)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the spice package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A flaw was found in spice in versions before 0.14.92. A     DoS tool might make it easier for remote attackers to     cause a denial of service (CPU consumption) by     performing many renegotiations within a single     connection.(CVE-2021-20201)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:0874-1 advisory.

  - A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers     to cause a denial of service (CPU consumption) by performing many renegotiations within a single     connection. (CVE-2021-20201)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2021:1927-1 advisory.

  - A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers     to cause a denial of service (CPU consumption) by performing many renegotiations within a single     connection. (CVE-2021-20201)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1956-1 advisory.

  - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote     display system, before spice-0.14.2-1. Both the SPICE client (spice-gtk) and server are affected by these     flaws. These flaws allow a malicious client or server to send specially crafted messages that, when     processed by the QUIC image compression algorithm, result in a process crash or potential code execution.
    (CVE-2020-14355)

  - A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers     to cause a denial of service (CPU consumption) by performing many renegotiations within a single     connection. (CVE-2021-20201)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES11 / SLES_SAP11 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:14744-1 advisory.

  - SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted     primary surface parameters, a similar issue to CVE-2015-5261. (CVE-2016-2150)

  - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote     display system, before spice-0.14.2-1. Both the SPICE client (spice-gtk) and server are affected by these     flaws. These flaws allow a malicious client or server to send specially crafted messages that, when     processed by the QUIC image compression algorithm, result in a process crash or potential code execution.
    (CVE-2020-14355)

  - A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers     to cause a denial of service (CPU consumption) by performing many renegotiations within a single     connection. (CVE-2021-20201)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1901-1 advisory.

  - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote     display system, before spice-0.14.2-1. Both the SPICE client (spice-gtk) and server are affected by these     flaws. These flaws allow a malicious client or server to send specially crafted messages that, when     processed by the QUIC image compression algorithm, result in a process crash or potential code execution.
    (CVE-2020-14355)

  - A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers     to cause a denial of service (CPU consumption) by performing many renegotiations within a single     connection. (CVE-2021-20201)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED12 / SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:1906-1 advisory.

  - A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers     to cause a denial of service (CPU consumption) by performing many renegotiations within a single     connection. (CVE-2021-20201)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1902-1 advisory.

  - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote     display system, before spice-0.14.2-1. Both the SPICE client (spice-gtk) and server are affected by these     flaws. These flaws allow a malicious client or server to send specially crafted messages that, when     processed by the QUIC image compression algorithm, result in a process crash or potential code execution.
    (CVE-2020-14355)

  - A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers     to cause a denial of service (CPU consumption) by performing many renegotiations within a single     connection. (CVE-2021-20201)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1924 advisory.

  - spice: Client initiated renegotiation denial of service (CVE-2021-20201)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1924 advisory.

  - spice: Client initiated renegotiation denial of service (CVE-2021-20201)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1924 advisory.

  - spice: Client initiated renegotiation denial of service (CVE-2021-20201)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
196493	RHEL 6 : spice (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
196400	RHEL 7 : spice (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
184760	Rocky Linux 8 : spice (RLSA-2021:1924)	Nessus	Rocky Linux Local Security Checks	medium
164428	SUSE SLES15 Security Update : spice (SUSE-SU-2022:2881-1)	Nessus	SuSE Local Security Checks	medium
163982	GLSA-202208-10 : Spice Server: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	medium
157936	EulerOS Virtualization 3.0.6.6 : spice (EulerOS-SA-2022-1146)	Nessus	Huawei Local Security Checks	medium
157561	AlmaLinux 8 : spice (ALSA-2021:1924)	Nessus	Alma Linux Local Security Checks	medium
154376	EulerOS 2.0 SP3 : spice (EulerOS-SA-2021-2616)	Nessus	Huawei Local Security Checks	medium
153351	EulerOS 2.0 SP2 : spice (EulerOS-SA-2021-2451)	Nessus	Huawei Local Security Checks	medium
153056	EulerOS 2.0 SP5 : spice (EulerOS-SA-2021-2349)	Nessus	Huawei Local Security Checks	medium
151079	openSUSE 15 Security Update : spice (openSUSE-SU-2021:0874-1)	Nessus	SuSE Local Security Checks	medium
150746	SUSE SLES15 Security Update : spice (SUSE-SU-2021:1927-1)	Nessus	SuSE Local Security Checks	medium
150727	SUSE SLES15 Security Update : spice (SUSE-SU-2021:1956-1)	Nessus	SuSE Local Security Checks	medium
150653	SUSE SLES11 Security Update : spice (SUSE-SU-2021:14744-1)	Nessus	SuSE Local Security Checks	high
150411	SUSE SLES15 Security Update : spice (SUSE-SU-2021:1901-1)	Nessus	SuSE Local Security Checks	medium
150403	SUSE SLED12 / SLES12 Security Update : spice (SUSE-SU-2021:1906-1)	Nessus	SuSE Local Security Checks	medium
150398	SUSE SLES12 Security Update : spice (SUSE-SU-2021:1902-1)	Nessus	SuSE Local Security Checks	medium
149910	Oracle Linux 8 : spice (ELSA-2021-1924)	Nessus	Oracle Linux Local Security Checks	medium
149736	CentOS 8 : spice (CESA-2021:1924)	Nessus	CentOS Local Security Checks	medium
149714	RHEL 8 : spice (RHSA-2021:1924)	Nessus	Red Hat Local Security Checks	medium

Detections

Analytics

CVE-2021-20201

medium

Tenable Plugins

medium

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

medium

medium

medium

medium

medium

medium