Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2020:2770-1 Critical: DPDK Denial Of Service Risks

suse
Calendar Grey September 28, 2020
Dist Suse Esm H88
SUSE Security Patch for dpdk resolves urgent vulnerabilities, improving the safety of Server Applications and Packagehub.
An update that fixes 5 vulnerabilities is now available

Summary

This update for dpdk fixes the following issues: - dpdk was updated to 19.11.4 - CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,CVE-2020-14377,CVE-2020-14378: Fixed multiple issues where a malicious guest could harm the host using vhost crypto, including executing code in host (VM Escape), reading host application memory space to guest and causing partially denial of service in the host(bsc#1176590). - For a list of fixes check: https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8 denial of service in the host (bsc#1176590). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product:

Topics%20covered

Topics Covered

security advisory denial of service critical SUSE dpdk

References

#1176590

Cross- CVE-2020-14374 CVE-2020-14375 CVE-2020-14376

CVE-2020-14377 CVE-2020-14378

Affected Products:

SUSE Linux Enterprise Module for Server Applications 15-SP2

SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP2

https://www.suse.com/security/cve/CVE-2020-14374.html

https://www.suse.com/security/cve/CVE-2020-14375.html

https://www.suse.com/security/cve/CVE-2020-14376.html

https://www.suse.com/security/cve/CVE-2020-14377.html

https://www.suse.com/security/cve/CVE-2020-14378.html

https://bugzilla.suse.com/1176590

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2020:2770-1
Rating: critical

Topics%20covered

Topics Covered

security advisory denial of service critical SUSE dpdk

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here