CVE-2021-20201: Red Hat Enterprise Linux

Medium severity, CVSS 5.3. EPSS: 2.7% chance of exploitation in the next 30 days.

A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection.

Affected products

• Red Hat Enterprise Linux: version 6.0 only; version 7.0 only; version 8.0 only
• Spice Project Spice: before 0.14.92 (fixed in 0.14.92)

Published 2021-05-28. Last modified 2026-06-17.