Search for packages
Package details: pkg:alpm/archlinux/spice@0.15.0-1
purl pkg:alpm/archlinux/spice@0.15.0-1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-usj4-e3m4-aaak A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection. CVE-2021-20201
VCID-xngp-n9hs-aaag Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPICE client (spice-gtk) and server are affected by these flaws. These flaws allow a malicious client or server to send specially crafted messages that, when processed by the QUIC image compression algorithm, result in a process crash or potential code execution. CVE-2020-14355

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:44:06.949312+00:00 Arch Linux Importer Fixing VCID-xngp-n9hs-aaag https://security.archlinux.org/AVG-1239 36.0.0
2025-03-28T07:44:06.928669+00:00 Arch Linux Importer Fixing VCID-usj4-e3m4-aaak https://security.archlinux.org/AVG-1239 36.0.0
2024-09-18T01:59:14.467925+00:00 Arch Linux Importer Fixing VCID-xngp-n9hs-aaag https://security.archlinux.org/AVG-1239 34.0.1
2024-09-18T01:59:14.440428+00:00 Arch Linux Importer Fixing VCID-usj4-e3m4-aaak https://security.archlinux.org/AVG-1239 34.0.1
2024-01-03T22:25:31.908181+00:00 Arch Linux Importer Fixing VCID-xngp-n9hs-aaag https://security.archlinux.org/AVG-1239 34.0.0rc1
2024-01-03T22:25:31.876121+00:00 Arch Linux Importer Fixing VCID-usj4-e3m4-aaak https://security.archlinux.org/AVG-1239 34.0.0rc1