SUSE-SU-2020:2767-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2767-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2020:2767-1
- Related
- Published
- 2020-09-28T15:48:33Z
- Modified
- 2020-09-28T15:48:33Z
- Summary
- Security update for dpdk
- Details
-
This update for dpdk fixes the following issues:
- dpdk was updated to 18.11.9. For a list of fixes check:
- CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,CVE-2020-14377,CVE-2020-14378: Fixed multiple issues where a malicious guest could
harm the host using vhost crypto, including executing code in host (VM Escape), reading host application memory space to guest
and causing partially denial of service in the host(bsc#1176590).
For a list of fixes check:
https://doc.dpdk.org/guides-18.11/relnotes/release18_11.html#fixes
- CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,CVE-2020-14377,CVE-2020-14378: Fixed multiple issues where a malicious guest could
harm the host using vhost crypto, including executing code in host (VM Escape), reading host application memory space to guest
and causing partially denial of service in the host(bsc#1176590).
For a list of fixes check:
- dpdk was updated to 18.11.9. For a list of fixes check:
- References
-
- https://www.suse.com/support/update/announcement/2020/suse-su-20202767-1/
- https://bugzilla.suse.com/1176590
- https://www.suse.com/security/cve/CVE-2020-14374
- https://www.suse.com/security/cve/CVE-2020-14375
- https://www.suse.com/security/cve/CVE-2020-14376
- https://www.suse.com/security/cve/CVE-2020-14377
- https://www.suse.com/security/cve/CVE-2020-14378
Affected packages
SUSE:Linux Enterprise High Performance Computing 15-ESPOS / dpdk
Package
- Name
- dpdk
- Purl
- purl:rpm/suse/dpdk&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed18.11.9-3.25.1
Ecosystem specific
{
"binaries": [
{
"dpdk-thunderx": "18.11.9-3.25.1",
"dpdk-thunderx-devel": "18.11.9-3.25.1",
"libdpdk-18_11": "18.11.9-3.25.1",
"dpdk-tools": "18.11.9-3.25.1",
"dpdk-devel": "18.11.9-3.25.1",
"dpdk": "18.11.9-3.25.1",
"dpdk-kmp-default": "18.11.9_k4.12.14_150.58-3.25.1",
"dpdk-thunderx-kmp-default": "18.11.9_k4.12.14_150.58-3.25.1"
}
]
}
SUSE:Linux Enterprise High Performance Computing 15-ESPOS / dpdk-thunderx
Package
- Name
- dpdk-thunderx
- Purl
- purl:rpm/suse/dpdk-thunderx&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed18.11.9-3.25.1
Ecosystem specific
{
"binaries": [
{
"dpdk-thunderx": "18.11.9-3.25.1",
"dpdk-thunderx-devel": "18.11.9-3.25.1",
"libdpdk-18_11": "18.11.9-3.25.1",
"dpdk-tools": "18.11.9-3.25.1",
"dpdk-devel": "18.11.9-3.25.1",
"dpdk": "18.11.9-3.25.1",
"dpdk-kmp-default": "18.11.9_k4.12.14_150.58-3.25.1",
"dpdk-thunderx-kmp-default": "18.11.9_k4.12.14_150.58-3.25.1"
}
]
}
SUSE:Linux Enterprise High Performance Computing 15-LTSS / dpdk
Package
- Name
- dpdk
- Purl
- purl:rpm/suse/dpdk&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed18.11.9-3.25.1
Ecosystem specific
{
"binaries": [
{
"dpdk-thunderx": "18.11.9-3.25.1",
"dpdk-thunderx-devel": "18.11.9-3.25.1",
"libdpdk-18_11": "18.11.9-3.25.1",
"dpdk-tools": "18.11.9-3.25.1",
"dpdk-devel": "18.11.9-3.25.1",
"dpdk": "18.11.9-3.25.1",
"dpdk-kmp-default": "18.11.9_k4.12.14_150.58-3.25.1",
"dpdk-thunderx-kmp-default": "18.11.9_k4.12.14_150.58-3.25.1"
}
]
}
SUSE:Linux Enterprise High Performance Computing 15-LTSS / dpdk-thunderx
Package
- Name
- dpdk-thunderx
- Purl
- purl:rpm/suse/dpdk-thunderx&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed18.11.9-3.25.1
Ecosystem specific
{
"binaries": [
{
"dpdk-thunderx": "18.11.9-3.25.1",
"dpdk-thunderx-devel": "18.11.9-3.25.1",
"libdpdk-18_11": "18.11.9-3.25.1",
"dpdk-tools": "18.11.9-3.25.1",
"dpdk-devel": "18.11.9-3.25.1",
"dpdk": "18.11.9-3.25.1",
"dpdk-kmp-default": "18.11.9_k4.12.14_150.58-3.25.1",
"dpdk-thunderx-kmp-default": "18.11.9_k4.12.14_150.58-3.25.1"
}
]
}
SUSE:Linux Enterprise Server 15-LTSS / dpdk
Package
- Name
- dpdk
- Purl
- purl:rpm/suse/dpdk&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed18.11.9-3.25.1
Ecosystem specific
{
"binaries": [
{
"dpdk-thunderx": "18.11.9-3.25.1",
"dpdk-thunderx-devel": "18.11.9-3.25.1",
"libdpdk-18_11": "18.11.9-3.25.1",
"dpdk-tools": "18.11.9-3.25.1",
"dpdk-devel": "18.11.9-3.25.1",
"dpdk": "18.11.9-3.25.1",
"dpdk-kmp-default": "18.11.9_k4.12.14_150.58-3.25.1",
"dpdk-thunderx-kmp-default": "18.11.9_k4.12.14_150.58-3.25.1"
}
]
}
SUSE:Linux Enterprise Server 15-LTSS / dpdk-thunderx
Package
- Name
- dpdk-thunderx
- Purl
- purl:rpm/suse/dpdk-thunderx&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed18.11.9-3.25.1
Ecosystem specific
{
"binaries": [
{
"dpdk-thunderx": "18.11.9-3.25.1",
"dpdk-thunderx-devel": "18.11.9-3.25.1",
"libdpdk-18_11": "18.11.9-3.25.1",
"dpdk-tools": "18.11.9-3.25.1",
"dpdk-devel": "18.11.9-3.25.1",
"dpdk": "18.11.9-3.25.1",
"dpdk-kmp-default": "18.11.9_k4.12.14_150.58-3.25.1",
"dpdk-thunderx-kmp-default": "18.11.9_k4.12.14_150.58-3.25.1"
}
]
}