Bug 792618 – <app-emulation/spice-0.15.0: Denial of service (CVE-2021-20201)

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description Sam James 2021-05-28 12:18:31 UTC]

Description:
"A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection."

https://bugzilla.redhat.com/show_bug.cgi?id=1921846
https://gitlab.freedesktop.org/spice/spice/-/issues/49

[addCollapseLink(1, 1, 'Toggle comment display'); Comment 1 NATTkA bot 2021-07-29 17:22:03 UTC Comment hidden (obsolete)]

Package list is empty or all packages have requested keywords.

[addCollapseLink(2, 1, 'Toggle comment display'); Comment 2 NATTkA bot 2021-07-29 17:30:15 UTC Comment hidden (obsolete)]

Package list is empty or all packages have requested keywords.

[addCollapseLink(3, 1, 'Toggle comment display'); Comment 3 NATTkA bot 2021-07-29 17:38:12 UTC Comment hidden (obsolete)]

Package list is empty or all packages have requested keywords.

[addCollapseLink(4, 1, 'Toggle comment display'); Comment 4 NATTkA bot 2021-07-29 17:46:19 UTC Comment hidden (obsolete)]

Package list is empty or all packages have requested keywords.

[addCollapseLink(5, 1, 'Toggle comment display'); Comment 5 NATTkA bot 2021-07-29 18:02:18 UTC Comment hidden (obsolete)]

Package list is empty or all packages have requested keywords.

[Comment 6 NATTkA bot 2021-07-29 18:10:35 UTC]

Package list is empty or all packages have requested keywords.

[Comment 7 John Helmert III 2022-08-09 21:26:53 UTC]

Merge request with patch: https://gitlab.freedesktop.org/spice/spice/-/merge_requests/150

Was merged as 95a0cfac8a1c8eff50f05e65df945da3bb501fc9:

https://gitlab.freedesktop.org/spice/spice/-/commit/95a0cfac8a1c8eff50f05e65df945da3bb501fc9

Which is in v0.15.0, so please cleanup.

[Comment 8 Larry the Git Cow 2022-08-09 21:30:28 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f669a2f91427e142b943efe92978216dff4c842a

commit f669a2f91427e142b943efe92978216dff4c842a
Author:     John Helmert III <[e-mail]>
AuthorDate: 2022-08-09 21:27:51 +0000
Commit:     John Helmert III <[e-mail]>
CommitDate: 2022-08-09 21:30:23 +0000

    app-emulation/spice: drop 0.14.3-r1
    
    Bug: https://bugs.gentoo.org/792618
    Signed-off-by: John Helmert III <[e-mail]>

 app-emulation/spice/Manifest                       |   1 -
 .../spice-0.14.3-CVE-2020-14355-404d7478.patch     |  31 ------
 .../spice-0.14.3-CVE-2020-14355-762e0aba.patch     |  13 ---
 .../spice-0.14.3-CVE-2020-14355-b24fe6b6.patch     |  18 ----
 .../spice-0.14.3-CVE-2020-14355-ef1b6ff7.patch     |  17 ----
 app-emulation/spice/spice-0.14.3-r1.ebuild         | 106 ---------------------
 6 files changed, 186 deletions(-)

[Comment 9 John Helmert III 2022-08-09 21:36:13 UTC]

GLSA request filed.

[Comment 10 Larry the Git Cow 2022-08-10 04:18:53 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=88dfcad797c12002c58b9aab13f036a6a0a0f3c7

commit 88dfcad797c12002c58b9aab13f036a6a0a0f3c7
Author:     GLSAMaker <[e-mail]>
AuthorDate: 2022-08-10 04:07:16 +0000
Commit:     John Helmert III <[e-mail]>
CommitDate: 2022-08-10 04:17:31 +0000

    [ GLSA 202208-10 ] Spice Server: Multiple Vulnerabilities
    
    Bug: https://bugs.gentoo.org/746920
    Bug: https://bugs.gentoo.org/792618
    Signed-off-by: GLSAMaker <[e-mail]>
    Signed-off-by: John Helmert III <[e-mail]>

 glsa-202208-10.xml | 44 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 44 insertions(+)

[Comment 11 John Helmert III 2022-08-10 04:28:13 UTC]

GLSA released, all done!