Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 73 articles for you...
100
security advisorydenial of serviceSUSESUSE: 2022:2881-2 Important: Spice Denial of Service Threat
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for spice ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2881-2 Rating: important References: #1181686 Cross-References: CVE-2021-20201 CVSS scores: CVE-2021-20201 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-20201 (SUSE): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H Affected Products: openSUSE Leap Micro 5.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for spice fixes the following issues: - CVE-2021-20201: Fixed an issue which could allow clients to cause a denial of service by repeatedly renegotiating a connection (bsc#1181686). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-2881=1 Package List: - openSUSE Leap Micro 5.2 (aarch64 x86_64): libspice-server1-0.14.3-150300.3.3.1 libspice-server1-debuginfo-0.14.3-150300.3.3.1 spice-debugsource-0.14.3-150300.3.3.1 References: https://www.suse.com/security/cve/CVE-2021-20201.html https://bugzilla.suse.com/1181686 . SUSE Security Patch for spice tackles CVE-2021-20001 with a significant rating; solution provided for service disruption.. SUSE Security Update, spice update, important security fix. . Severity: Important. LinuxSecurity.com Team
Sep 01, 2022
•Important
SuSE
100
security advisorydenial of serviceimportantSUSE: 2022:2881-1 Major Advisory: Spice Denial Of Service Vulnerability
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for spice ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2881-1 Rating: important References: #1181686 Cross-References: CVE-2021-20201 CVSS scores: CVE-2021-20201 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-20201 (SUSE): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Server Applications 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for spice fixes the following issues: - CVE-2021-20201: Fixed an issue which could allow clients to cause a denial of service by repeatedly renegotiating a connection (bsc#1181686). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2881=1 - SUSE Linux Enterprise Module for Server Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP3-2022-2881=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-2881=1 PackageList: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libspice-server-devel-0.14.3-150300.3.3.1 libspice-server1-0.14.3-150300.3.3.1 libspice-server1-debuginfo-0.14.3-150300.3.3.1 spice-debugsource-0.14.3-150300.3.3.1 - SUSE Linux Enterprise Module for Server Applications 15-SP3 (aarch64 ppc64le s390x x86_64): libspice-server-devel-0.14.3-150300.3.3.1 libspice-server1-0.14.3-150300.3.3.1 libspice-server1-debuginfo-0.14.3-150300.3.3.1 spice-debugsource-0.14.3-150300.3.3.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): libspice-server1-0.14.3-150300.3.3.1 libspice-server1-debuginfo-0.14.3-150300.3.3.1 spice-debugsource-0.14.3-150300.3.3.1 References: https://www.suse.com/security/cve/CVE-2021-20201.html https://bugzilla.suse.com/1181686 . SUSE Security Bulletin: Critical update released for spice to rectify denial of service vulnerability identified as CVE-2021-20202.. SUSE Update, Spice Security, Denial Of Service, Important Security Advisory. . Severity: Important. LinuxSecurity.com Team
Aug 24, 2022
•Important
SuSE
203
security advisorymoderatedenial of serviceMageia 8: MGASA-2021-0405 Moderate: Spice Denial of Service Threat
Updated spice packages fix security vulnerability: A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection . MGASA-2021-0405 - Updated spice packages fix security vulnerability Publication date: 15 Aug 2021 URL: https://advisories.mageia.org/MGASA-2021-0405.html Type: security Affected Mageia releases: 8 CVE: CVE-2021-20201 Updated spice packages fix security vulnerability: A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection (CVE-2021-20201). References: - https://bugs.mageia.org/show_bug.cgi?id=28947 - https://access.redhat.com/errata/RHSA-2021:1924 - - https://www.cve.org/CVERecord?id=CVE-2021-20201 SRPMS: - 8/core/spice-0.14.3-3.1.mga8 . Recent updates for Spice address a critical security vulnerability that could facilitate remote Denial of Service (DoS) attacks on Mageia 8. Discover the details for more insights. Mageia Security Update, Spice Vulnerability Fix, Remote Attack Prevention. . LinuxSecurity.com Team
Aug 15, 2021
Mageia
202
security advisorydenial of servicesecurity updateopenSUSE: 2021:0874-1 Critical: Spice Denial Of Service
An update that fixes one vulnerability is now available. . openSUSE Security Update: Security update for spice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0874-1 Rating: important References: #1181686 Cross-References: CVE-2021-20201 CVSS scores: CVE-2021-20201 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-20201 (SUSE): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for spice fixes the following issues: - CVE-2021-20201: client initiated renegotiation causing denial of service (bsc#1181686) This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-874=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libspice-server-devel-0.14.2-lp152.2.6.1 libspice-server1-0.14.2-lp152.2.6.1 libspice-server1-debuginfo-0.14.2-lp152.2.6.1 spice-debugsource-0.14.2-lp152.2.6.1 References: https://www.suse.com/security/cve/CVE-2021-20201.html https://bugzilla.suse.com/1181686 . This Fedora Security Patch delivers a crucial remedy for qemu, tackling a severe remote execution threat.. openSUSE Security Update, Spice Update, Denial Of Service Fix. . Severity: Critical. LinuxSecurity.com Team
Jun 16, 2021
•Critical
OpenSUSE
100
security advisorydenial of serviceupdateSUSE: 2021:1956-1 Important: Spice Denial Of Service & Buffer Overflow
An update that fixes two vulnerabilities is now available. . SUSE Security Update: Security update for spice ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:1956-1 Rating: important References: #1177158 #1181686 Cross-References: CVE-2020-14355 CVE-2021-20201 CVSS scores: CVE-2020-14355 (NVD) : 6.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L CVE-2020-14355 (SUSE): 6.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L CVE-2021-20201 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-20201 (SUSE): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H Affected Products: SUSE Manager Server 4.0 SUSE Manager Retail Branch Server 4.0 SUSE Manager Proxy 4.0 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Enterprise Storage 6 SUSE CaaS Platform 4.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for spice fixes the following issues: - CVE-2021-20201: client initiated renegotiation causing denial of service (bsc#1181686) - CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC decoding code (bsc#1177158) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Manager Server 4.0: zypper in -t patchSUSE-SLE-Product-SUSE-Manager-Server-4.0-2021-1956=1 - SUSE Manager Retail Branch Server 4.0: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.0-2021-1956=1 - SUSE Manager Proxy 4.0: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.0-2021-1956=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2021-1956=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2021-1956=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2021-1956=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2021-1956=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2021-1956=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2021-1956=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - SUSE Manager Server 4.0 (ppc64le s390x x86_64): libspice-server-devel-0.14.1-4.3.1 libspice-server1-0.14.1-4.3.1 libspice-server1-debuginfo-0.14.1-4.3.1 spice-debugsource-0.14.1-4.3.1 - SUSE Manager Retail Branch Server 4.0 (x86_64): libspice-server-devel-0.14.1-4.3.1 libspice-server1-0.14.1-4.3.1 libspice-server1-debuginfo-0.14.1-4.3.1 spice-debugsource-0.14.1-4.3.1 - SUSE Manager Proxy 4.0 (x86_64): libspice-server-devel-0.14.1-4.3.1 libspice-server1-0.14.1-4.3.1 libspice-server1-debuginfo-0.14.1-4.3.1 spice-debugsource-0.14.1-4.3.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): libspice-server-devel-0.14.1-4.3.1 libspice-server1-0.14.1-4.3.1 libspice-server1-debuginfo-0.14.1-4.3.1 spice-debugsource-0.14.1-4.3.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): libspice-server-devel-0.14.1-4.3.1 libspice-server1-0.14.1-4.3.1 libspice-server1-debuginfo-0.14.1-4.3.1 spice-debugsource-0.14.1-4.3.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): libspice-server-devel-0.14.1-4.3.1 libspice-server1-0.14.1-4.3.1 libspice-server1-debuginfo-0.14.1-4.3.1 spice-debugsource-0.14.1-4.3.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): libspice-server-devel-0.14.1-4.3.1 libspice-server1-0.14.1-4.3.1 libspice-server1-debuginfo-0.14.1-4.3.1 spice-debugsource-0.14.1-4.3.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): libspice-server-devel-0.14.1-4.3.1 libspice-server1-0.14.1-4.3.1 libspice-server1-debuginfo-0.14.1-4.3.1 spice-debugsource-0.14.1-4.3.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): libspice-server-devel-0.14.1-4.3.1 libspice-server1-0.14.1-4.3.1 libspice-server1-debuginfo-0.14.1-4.3.1 spice-debugsource-0.14.1-4.3.1 - SUSE CaaS Platform 4.0 (x86_64): libspice-server-devel-0.14.1-4.3.1 libspice-server1-0.14.1-4.3.1 libspice-server1-debuginfo-0.14.1-4.3.1 spice-debugsource-0.14.1-4.3.1 References: https://www.suse.com/security/cve/CVE-2020-14355.html https://www.suse.com/security/cve/CVE-2021-20201.html https://bugzilla.suse.com/1177158 https://bugzilla.suse.com/1181686 . SUSE issues key security patch for spice tackling severe vulnerabilities related to buffer overflows and denial-of-service threats.. SUSE Manager, Security Update, Spice Fix, Buffer Overflow, Denial of Service. . Severity: Important. LinuxSecurity.com Team
Jun 11, 2021
•Important
SuSE
100
security advisorydenial of servicepatchSUSE: 2021:1927-1 Critical: Spice Denial of Service Security Fix
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for spice ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:1927-1 Rating: important References: #1181686 Cross-References: CVE-2021-20201 CVSS scores: CVE-2021-20201 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-20201 (SUSE): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H Affected Products: SUSE MicroOS 5.0 SUSE Linux Enterprise Module for Server Applications 15-SP2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for spice fixes the following issues: - CVE-2021-20201: client initiated renegotiation causing denial of service (bsc#1181686) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE MicroOS 5.0: zypper in -t patch SUSE-SUSE-MicroOS-5.0-2021-1927=1 - SUSE Linux Enterprise Module for Server Applications 15-SP2: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP2-2021-1927=1 Package List: - SUSE MicroOS 5.0 (aarch64 x86_64): libspice-server1-0.14.2-3.6.1 libspice-server1-debuginfo-0.14.2-3.6.1 spice-debugsource-0.14.2-3.6.1 - SUSE Linux Enterprise Module for Server Applications 15-SP2 (aarch64 ppc64le s390x x86_64): libspice-server-devel-0.14.2-3.6.1 libspice-server1-0.14.2-3.6.1 libspice-server1-debuginfo-0.14.2-3.6.1 spice-debugsource-0.14.2-3.6.1 References: https://www.suse.com/security/cve/CVE-2021-20201.html https://bugzilla.suse.com/1181686 . SUSE Security Bulletin: Patch for spice addressing service interruptionvulnerabilities with Advisory ID: SUSE-SU-2021:1927-1.. SUSE MicroOS, Spice Update, Denial of Service. . Severity: Important. LinuxSecurity.com Team
Jun 10, 2021
•Important
SuSE
100
security advisorydenial of servicebuffer overflowSUSE: 2021:1902-1 Important Spice Denial Of Service And Buffer Overflow
An update that fixes two vulnerabilities is now available. . SUSE Security Update: Security update for spice ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:1902-1 Rating: important References: #1177158 #1181686 Cross-References: CVE-2020-14355 CVE-2021-20201 CVSS scores: CVE-2020-14355 (NVD) : 6.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L CVE-2020-14355 (SUSE): 6.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L CVE-2021-20201 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-20201 (SUSE): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise Server 12-SP2-BCL ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for spice fixes the following issues: - CVE-2021-20201: client initiated renegotiation causing denial of service (bsc#1181686) - CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC decoding code (bsc#1177158) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-SP2-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2021-1902=1 Package List: - SUSE Linux Enterprise Server 12-SP2-BCL (x86_64): libspice-server1-0.12.7-10.12.1 libspice-server1-debuginfo-0.12.7-10.12.1 spice-debugsource-0.12.7-10.12.1 References: https://www.suse.com/security/cve/CVE-2020-14355.html https://www.suse.com/security/cve/CVE-2021-20201.html https://bugzilla.suse.com/1177158 https://bugzilla.suse.com/1181686 . SUSE Security Patch for samba tackles severe vulnerabilities. Apply fixesto maintain system security and eliminate problems.. SUSE Security Update, Spice Vulnerabilities, System Integrity. . Severity: Important. LinuxSecurity.com Team
Jun 08, 2021
•Important
SuSE
100
security advisorydenial of serviceupdateSUSE: 2021:14744-1 Important: Spice Denial Of Service Fix
An update that fixes three vulnerabilities is now available. . SUSE Security Update: Security update for spice ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:14744-1 Rating: important References: #1177158 #1181686 #982386 Cross-References: CVE-2016-2150 CVE-2020-14355 CVE-2021-20201 CVSS scores: CVE-2016-2150 (NVD) : 7.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2016-2150 (SUSE): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2020-14355 (NVD) : 6.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L CVE-2020-14355 (SUSE): 6.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L CVE-2021-20201 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-20201 (SUSE): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise Server 11-SP4-LTSS SUSE Linux Enterprise Debuginfo 11-SP4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for spice fixes the following issues: - CVE-2021-20201: client initiated renegotiation causing denial of service (bsc#1181686) - CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC decoding code (bsc#1177158) - CVE-2016-2150: Fixed a guest escape using crafted primary surface parameters (bsc#982386) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11-SP4-LTSS: zypper in -t patch slessp4-spice-14744=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-spice-14744=1 PackageList: - SUSE Linux Enterprise Server 11-SP4-LTSS (i586 x86_64): libspice-server1-0.12.4-21.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 x86_64): spice-debuginfo-0.12.4-21.1 spice-debugsource-0.12.4-21.1 References: https://www.suse.com/security/cve/CVE-2016-2150.html https://www.suse.com/security/cve/CVE-2020-14355.html https://www.suse.com/security/cve/CVE-2021-20201.html https://bugzilla.suse.com/1177158 https://bugzilla.suse.com/1181686 https://bugzilla.suse.com/982386 . SUSE has announced a critical security patch for spice that addresses several significant vulnerabilities, such as denial of service and potential buffer overflow risks.. SUSE Spice Security Update, Linux Patch Management, Denial of Service Protection. . Severity: Important. LinuxSecurity.com Team
Jun 08, 2021
•Important
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!