A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:1924 advisory.

  - A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers     to cause a denial of service (CPU consumption) by performing many renegotiations within a single     connection. (CVE-2021-20201)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2881-1 advisory.

  - A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers     to cause a denial of service (CPU consumption) by performing many renegotiations within a single     connection. (CVE-2021-20201)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202208-10 (Spice Server: Multiple Vulnerabilities)

  - A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers     to cause a denial of service (CPU consumption) by performing many renegotiations within a single     connection. (CVE-2021-20201)

  -  Please review the referenced CVE identifiers for details.  (CVE-2021-14355)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the spice package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers     to cause a denial of service (CPU consumption) by performing many renegotiations within a single     connection. (CVE-2021-20201)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:1924 advisory.

  - A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers     to cause a denial of service (CPU consumption) by performing many renegotiations within a single     connection. (CVE-2021-20201)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the spice package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers     to cause a denial of service (CPU consumption) by performing many renegotiations within a single     connection. (CVE-2021-20201)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the spice package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A flaw was found in spice in versions before 0.14.92. A     DoS tool might make it easier for remote attackers to     cause a denial of service (CPU consumption) by     performing many renegotiations within a single     connection.(CVE-2021-20201)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:0874-1 advisory.

  - A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers     to cause a denial of service (CPU consumption) by performing many renegotiations within a single     connection. (CVE-2021-20201)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2021:1927-1 advisory.

  - A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers     to cause a denial of service (CPU consumption) by performing many renegotiations within a single     connection. (CVE-2021-20201)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1956-1 advisory.

  - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote     display system, before spice-0.14.2-1. Both the SPICE client (spice-gtk) and server are affected by these     flaws. These flaws allow a malicious client or server to send specially crafted messages that, when     processed by the QUIC image compression algorithm, result in a process crash or potential code execution.
    (CVE-2020-14355)

  - A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers     to cause a denial of service (CPU consumption) by performing many renegotiations within a single     connection. (CVE-2021-20201)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES11 / SLES_SAP11 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:14744-1 advisory.

  - SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted     primary surface parameters, a similar issue to CVE-2015-5261. (CVE-2016-2150)

  - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote     display system, before spice-0.14.2-1. Both the SPICE client (spice-gtk) and server are affected by these     flaws. These flaws allow a malicious client or server to send specially crafted messages that, when     processed by the QUIC image compression algorithm, result in a process crash or potential code execution.
    (CVE-2020-14355)

  - A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers     to cause a denial of service (CPU consumption) by performing many renegotiations within a single     connection. (CVE-2021-20201)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1901-1 advisory.

  - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote     display system, before spice-0.14.2-1. Both the SPICE client (spice-gtk) and server are affected by these     flaws. These flaws allow a malicious client or server to send specially crafted messages that, when     processed by the QUIC image compression algorithm, result in a process crash or potential code execution.
    (CVE-2020-14355)

  - A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers     to cause a denial of service (CPU consumption) by performing many renegotiations within a single     connection. (CVE-2021-20201)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED12 / SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:1906-1 advisory.

  - A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers     to cause a denial of service (CPU consumption) by performing many renegotiations within a single     connection. (CVE-2021-20201)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1902-1 advisory.

  - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote     display system, before spice-0.14.2-1. Both the SPICE client (spice-gtk) and server are affected by these     flaws. These flaws allow a malicious client or server to send specially crafted messages that, when     processed by the QUIC image compression algorithm, result in a process crash or potential code execution.
    (CVE-2020-14355)

  - A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers     to cause a denial of service (CPU consumption) by performing many renegotiations within a single     connection. (CVE-2021-20201)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1924 advisory.

    [0.14.3-4]
    - Disable client-side renegotiation to prevent potential DoS       Resolves: rhbz#1904459

    [0.14.3-3]
    - Fix some static analyzer issues
    - Removed Obsoletes line for spice-client       Related: rhbz#1840240

    [0.14.3-2]
    - Fix multiple buffer overflows in QUIC decoding code       Resolves: rhbz#1829946

    [0.14.3-1]
    - Update to 0.14.3       Revolves: rhbz#1840240

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1924 advisory.

  - spice: Client initiated renegotiation denial of service (CVE-2021-20201)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1924 advisory.

    The Simple Protocol for Independent Computing Environments (SPICE) is a remote display system built for     virtual environments which allows the user to view a computing 'desktop' environment not only on the     machine where it is running, but from anywhere on the Internet and from a wide variety of machine     architectures.

    Security Fix(es):

    * spice: Client initiated renegotiation denial of service (CVE-2021-20201)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
196493	RHEL 6 : spice (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	medium
196400	RHEL 7 : spice (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
184760	Rocky Linux 8 : spice (RLSA-2021:1924)	Nessus	Rocky Linux Local Security Checks	medium
164428	SUSE SLES15 Security Update : spice (SUSE-SU-2022:2881-1)	Nessus	SuSE Local Security Checks	medium
163982	GLSA-202208-10 : Spice Server: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	medium
157936	EulerOS Virtualization 3.0.6.6 : spice (EulerOS-SA-2022-1146)	Nessus	Huawei Local Security Checks	medium
157561	AlmaLinux 8 : spice (ALSA-2021:1924)	Nessus	Alma Linux Local Security Checks	medium
154376	EulerOS 2.0 SP3 : spice (EulerOS-SA-2021-2616)	Nessus	Huawei Local Security Checks	medium
153351	EulerOS 2.0 SP2 : spice (EulerOS-SA-2021-2451)	Nessus	Huawei Local Security Checks	medium
153056	EulerOS 2.0 SP5 : spice (EulerOS-SA-2021-2349)	Nessus	Huawei Local Security Checks	medium
151079	openSUSE 15 Security Update : spice (openSUSE-SU-2021:0874-1)	Nessus	SuSE Local Security Checks	medium
150746	SUSE SLES15 Security Update : spice (SUSE-SU-2021:1927-1)	Nessus	SuSE Local Security Checks	medium
150727	SUSE SLES15 Security Update : spice (SUSE-SU-2021:1956-1)	Nessus	SuSE Local Security Checks	medium
150653	SUSE SLES11 Security Update : spice (SUSE-SU-2021:14744-1)	Nessus	SuSE Local Security Checks	high
150411	SUSE SLES15 Security Update : spice (SUSE-SU-2021:1901-1)	Nessus	SuSE Local Security Checks	medium
150403	SUSE SLED12 / SLES12 Security Update : spice (SUSE-SU-2021:1906-1)	Nessus	SuSE Local Security Checks	medium
150398	SUSE SLES12 Security Update : spice (SUSE-SU-2021:1902-1)	Nessus	SuSE Local Security Checks	medium
149910	Oracle Linux 8 : spice (ELSA-2021-1924)	Nessus	Oracle Linux Local Security Checks	medium
149736	CentOS 8 : spice (CESA-2021:1924)	Nessus	CentOS Local Security Checks	medium
149714	RHEL 8 : spice (RHSA-2021:1924)	Nessus	Red Hat Local Security Checks	medium

Detections

Analytics

CVE-2021-20201

medium

Tenable Plugins

medium

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

medium

medium

medium

medium

medium

medium