Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

Ubuntu: USN-4550-1 Critical: DPDK Security Issues Report

ubuntu
Calendar Grey September 28, 2020
Dist Ubuntu Esm H88
A significant update in Ubuntu addressed various vulnerabilities in DPDK, enhancing protection against potential threats.
Several security issues were fixed in DPDK.

Summary

Several security issues were fixed in DPDK.

Software Description:

- dpdk: set of libraries for fast packet processing

Details:

Ryan Hall discovered that DPDK incorrectly handled vhost crypto. An

attacker inside a guest could use these issues to perform multiple attacks,

including denial of service attacks, obtaining sensitive information from

the host, and possibly executing arbitrary code on the host.

Topics%20covered

Topics Covered

security advisory critical software update Ubuntu information disclosure Denial of Service dpdk

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS:
  dpdk                            19.11.3-0ubuntu0.2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4550-1

CVE-2020-14374, CVE-2020-14375, CVE-2020-14376, CVE-2020-14377,

CVE-2020-14378

Severity
critical
Lowest
Low
Medium
High
Critical

September 28, 2020

Topics%20covered

Topics Covered

security advisory critical software update Ubuntu information disclosure Denial of Service dpdk

Package Information

https://launchpad.net/ubuntu/+source/dpdk/19.11.3-0ubuntu0.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here