CVE-2021-20201

EPSS 2.7%CWE-400

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 2.7%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Ciclo de vida

28 mai 2021Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection.

Produtos afetados

n/a · spice

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://blog.qualys.com/product-tech/2011/10/31/tls-renegotiation-and-denial-of-service-attacks https://bugzilla.redhat.com/show_bug.cgi?id=1921846 https://security.gentoo.org/glsa/202208-10