Most recent entries from all

bdu:2021-03500

Withdrawn: BELL-CVE-2020-14355 — CVE-2020-14355 does not affect BellSoft software

Withdrawn by the publisher.

EUVD-2026-42384

fkie_cve-2020-14355

Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPICE client (spice-gtk) and server are affected by these flaws. These flaws allow a malicious client or server to send specially crafted messages that, when processed by the QUIC image compression algorithm, result in a process crash or potential code execution.

GHSA-2457-jhx6-82v4

gsd-2020-14355

OESA-2021-1082 — spice security update

Affected: openEuler:20.03-LTS: spice, openEuler:20.03-LTS-SP1: spice

The SPICE package provides the SPICE server library and client. These components are used to provide access to a remote machine's display and devices. Security Fix(es): Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPICE client (spice-gtk) and server are affected by these flaws. These flaws allow a malicious client or server to send specially crafted messages that, when processed by the QUIC image compression algorithm, result in a process crash or potential code execution.(CVE-2020-14355)

openSUSE-SU-2020:1802-1 — Security update for spice

Security update for spice

RHSA-2020:4184 — Red Hat Security Advisory: spice and spice-gtk security update

spice: multiple buffer overflow vulnerabilities in QUIC decoding code

SUSE-SU-2020:3070-1 — Security update for spice

Security update for spice

UBUNTU-CVE-2020-14355

Affected: Ubuntu:Pro:14.04:LTS: spice, Ubuntu:16.04:LTS: spice, Ubuntu:16.04:LTS: spice-gtk, Ubuntu:18.04:LTS: spice, Ubuntu:18.04:LTS: spice-gtk, Ubuntu:20.04:LTS: spice, Ubuntu:20.04:LTS: spice-gtk, Ubuntu:22.04:LTS: spice-gtk, Ubuntu:24.04:LTS: spice-gtk, Ubuntu:25.10: spice-gtk and 1 more