Skip to content
OpenAdvisories
High 1 exploited CVE RHSA-2014:0416 4 CVEs

Red Hat Security Advisory: rhevm-spice-client security update

Published Sep 13, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 5

ReleasePackageFixed in
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-spice-client 0:3.3-12.el6_5
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-spice-client-x64-cab 0:3.3-12.el6_5
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-spice-client-x64-msi 0:3.3-12.el6_5
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-spice-client-x86-cab 0:3.3-12.el6_5
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-spice-client-x86-msi 0:3.3-12.el6_5

Vulnerabilities 4

  • High 7.5
    CVE-2014-0160 Exploited Public exploit EPSS 100%

    The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension pack…

    openssl Debian
    KEV May 4, 2022
  • Unscored —
    CVE-2012-4929 Public exploit

    The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compre…

    openssl apache2 nginx lighttpd Debian
  • Unscored —
    CVE-2013-0169 Public exploit EPSS 36%

    The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other produc…

    openssl nss bouncycastle gnutls28 Debian Ubuntu
  • Unscored —
    CVE-2013-4353 EPSS 12%

    The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial …

    openssl Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=857051
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=907589
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1049058
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1084875
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0416.json
  • report
    https://access.redhat.com/security/cve/CVE-2012-4929
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-4929
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-4929
  • report
    https://access.redhat.com/security/cve/CVE-2013-0169
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-0169
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-0169
  • article
    http://www.isg.rhul.ac.uk/tls/
  • article
    http://www.openssl.org/news/secadv_20130205.txt
  • article
    https://polarssl.org/tech-updates/releases/polarssl-1.2.5-released
  • report
    https://access.redhat.com/security/cve/CVE-2013-4353
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4353
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4353
  • report
    https://access.redhat.com/security/cve/CVE-2014-0160
  • article
    https://access.redhat.com/security/vulnerabilities/heartbleed
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0160
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0160
  • article
    http://www.openssl.org/news/secadv_20140407.txt
  • article
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog