Advisory ROSA-SA-2024-2394

Software: spice 0.14.3
OS: ROSA Virtualization 2.1

package_evr_string: spice-0.14.3-4.rv3

CVE-ID: CVE-2021-20201
BDU-ID: 2022-05884
CVE-Crit: MEDIUM
CVE-DESC.: A vulnerability in the SPICE remote virtual desktop rendering system is associated with significantly less resource consumption at the client than at the server when negotiating a new SSL connection. Exploitation of the vulnerability allows an attacker acting remotely to cause a denial-of-service condition
CVE-STATUS: Fixed
CVE-REV: To close, run yum update spice command