kritisch
openSUSE-SU-2020:1599-1
Security update for dpdk
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
Keine Quelle nennt einen CVSS-Wert.
Trivys eigenes Label ist CRITICAL. Kritisch laut SUSE.
Beschreibung
This update for dpdk fixes the following issues: - dpdk was updated to 19.11.4 - CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,CVE-2020-14377,CVE-2020-14378: Fixed multiple issues where a malicious guest could harm the host using vhost crypto, including executing code in host (VM Escape), reading host application memory space to guest and causing partially denial of service in the host(bsc#1176590). - For a list of fixes check: https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8 denial of service in the host (bsc#1176590). This update was imported from the SUSE:SLE-15-SP2:Update update project.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| openSUSE Leap 15.2 | dpdk, dpdk-devel, dpdk-doc und 5 weitere | 19.11.4-lp152.2.8.1 und 1 weitere |
Alle 8 Einträge aus 1 Quelle zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| openSUSE Leap 15.2 | dpdk | 19.11.4-lp152.2.8.1 |
| openSUSE Leap 15.2 | dpdk-devel | 19.11.4-lp152.2.8.1 |
| openSUSE Leap 15.2 | dpdk-doc | 19.11.4-lp152.2.8.1 |
| openSUSE Leap 15.2 | dpdk-examples | 19.11.4-lp152.2.8.1 |
| openSUSE Leap 15.2 | dpdk-kmp-default | 19.11.4_k5.3.18_lp152.41-lp152.2.8.1 |
| openSUSE Leap 15.2 | dpdk-kmp-preempt | 19.11.4_k5.3.18_lp152.41-lp152.2.8.1 |
| openSUSE Leap 15.2 | dpdk-tools | 19.11.4-lp152.2.8.1 |
| openSUSE Leap 15.2 | libdpdk-20_0 | 19.11.4-lp152.2.8.1 |
Referenzen
- https://bugzilla.suse.com/1176590
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YBSGY453NNB4LDJYA3J7SNEOJKG5HCAD/
- https://www.suse.com/security/cve/CVE-2020-14374/
- https://www.suse.com/security/cve/CVE-2020-14375/
- https://www.suse.com/security/cve/CVE-2020-14376/
- https://www.suse.com/security/cve/CVE-2020-14377/
- https://www.suse.com/security/cve/CVE-2020-14378/
- https://www.suse.com/support/security/rating/