USN-4572-2: Spice vulnerability

Published Oct 7, 2020

Updated

USN-4572-1 fixed a vulnerability in Spice. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Frediano Ziglio discovered that Spice incorrectly handled QUIC image decoding. A remote attacker could use this to cause Spice to crash, resulting in a denial of service, or possibly execute arbitrary code.

Affected Software

0 affected components

Event History

Feb 23, 2026

Advisory Published

via Ubuntu·07:29 PM

Data Sourced

via Ubuntu·07:29 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2020-14355

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is USN-4572-2.

What software is affected by this vulnerability?

The software affected by this vulnerability is libspice-server1 version 0.12.4-0nocelt2ubuntu1.8+esm1 on Ubuntu 14.04.

What is the remedy for this vulnerability?

The remedy for this vulnerability is to update libspice-server1 to version 0.12.4-0nocelt2ubuntu1.8+esm1 or higher.

What is the severity of this vulnerability?

The severity of this vulnerability has not been provided.

Where can I find more information about this vulnerability?

You can find more information about this vulnerability on the Ubuntu Security Notices website.