CVE-2021-20201

概要

参考情報

• blog.qualys.com/product-tech/2011/10/31/tls-renegotiation-and-denial-of-service-attacks · Exploit
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• security.gentoo.org/glsa/202208-10 · Third Party Advisory

spice のその他の脆弱性

• CVE-2020-14355中 6.6Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14…
• CVE-2019-3813高 7.5Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslot_get_virt. This may lead …
• CVE-2018-10873高 8.8A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bou…
• CVE-2016-9578高 7.5A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An attacker able to connect to the SPICE server co…
• CVE-2016-9577高 8.8A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An authenticated attacker could send crafted messa…