Lucene search

K
oraclelinuxOracleLinuxELSA-2021-1924
HistoryMay 25, 2021 - 12:00 a.m.

spice security update

2021-05-2500:00:00
linux.oracle.com
10

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

[0.14.3-4]

  • Disable client-side renegotiation to prevent potential DoS
    Resolves: rhbz#1904459
    [0.14.3-3]
  • Fix some static analyzer issues
  • Removed Obsoletes line for spice-client
    Related: rhbz#1840240
    [0.14.3-2]
  • Fix multiple buffer overflows in QUIC decoding code
    Resolves: rhbz#1829946
    [0.14.3-1]
  • Update to 0.14.3
    Revolves: rhbz#1840240

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P