Red Hat Security Advisory

RHSA-2020:4186

spice and spice-gtk security update

Released 2020-10-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) spice-server-devel-0.14.2-1.el8_2.1
Red Hat Enterprise Linux AppStream (v. 8) spice-0.14.2-1.el8_2.1, spice-glib-0.37-1.el8_2.2, spice-glib-devel-0.37-1.el8_2.2 +6

TI-2020-11225 CVE-2020-14355 · GHSA-2457-jhx6-82v4

LOW 34

Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1.

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.02689 Published 2020-10-07 Partial fix CWE-120