Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 538
Alerts This Week
Warning Icon 1 538

Ubuntu 22.04 LTS USN-5401-1 DPDK Denial Of Service Risk

ubuntu
Calendar Grey May 4, 2022
Dist Ubuntu Esm H88
Several vulnerabilities in DPDK have been addressed in Ubuntu. It's crucial to upgrade to mitigate risks of service disruption and possible code exploitation.
Several security issues were fixed in DPDK.

Summary

Several security issues were fixed in DPDK.

Software Description:

- dpdk: set of libraries for fast packet processing

Details:

Wenxiang Qian discovered that DPDK incorrectly checked certain payloads. An

attacker could use this issue to cause DPDK to crash, resulting in a denial

of service, or possibly execute arbitrary code. (CVE-2021-3839)

It was discovered that DPDK incorrectly handled inflight type messages. An

attacker could possibly use this issue to cause DPDK to consume resources,

leading to a denial of service. (CVE-2022-0669)

Topics%20covered

Topics Covered

security advisory denial of service security issue Ubuntu resource consumption DPDK

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS:
  dpdk                            21.11.1-0ubuntu0.3

Ubuntu 21.10:
  dpdk                            20.11.5-0ubuntu1

Ubuntu 20.04 LTS:
  dpdk                            19.11.12-0ubuntu0.20.04.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5401-1

CVE-2021-3839, CVE-2022-0669

Severity
critical
Lowest
Low
Medium
High
Critical

May 04, 2022

Topics%20covered

Topics Covered

security advisory denial of service security issue Ubuntu resource consumption DPDK

Package Information

https://launchpad.net/ubuntu/+source/dpdk/21.11.1-0ubuntu0.3
https://launchpad.net/ubuntu/+source/dpdk/20.11.5-0ubuntu1
https://launchpad.net/ubuntu/+source/dpdk/19.11.12-0ubuntu0.20.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.