critical
openSUSE-SU-2020:1599-1
Security update for dpdk
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
No source gives a CVSS score.
Trivy's own label is CRITICAL. Rated critical by SUSE.
Description
This update for dpdk fixes the following issues: - dpdk was updated to 19.11.4 - CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,CVE-2020-14377,CVE-2020-14378: Fixed multiple issues where a malicious guest could harm the host using vhost crypto, including executing code in host (VM Escape), reading host application memory space to guest and causing partially denial of service in the host(bsc#1176590). - For a list of fixes check: https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8 denial of service in the host (bsc#1176590). This update was imported from the SUSE:SLE-15-SP2:Update update project.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| openSUSE Leap 15.2 | dpdk, dpdk-devel, dpdk-doc and 5 more | 19.11.4-lp152.2.8.1 and 1 more |
Show all 8 entries from 1 source
| Source | Package | Fixed in |
|---|---|---|
| openSUSE Leap 15.2 | dpdk | 19.11.4-lp152.2.8.1 |
| openSUSE Leap 15.2 | dpdk-devel | 19.11.4-lp152.2.8.1 |
| openSUSE Leap 15.2 | dpdk-doc | 19.11.4-lp152.2.8.1 |
| openSUSE Leap 15.2 | dpdk-examples | 19.11.4-lp152.2.8.1 |
| openSUSE Leap 15.2 | dpdk-kmp-default | 19.11.4_k5.3.18_lp152.41-lp152.2.8.1 |
| openSUSE Leap 15.2 | dpdk-kmp-preempt | 19.11.4_k5.3.18_lp152.41-lp152.2.8.1 |
| openSUSE Leap 15.2 | dpdk-tools | 19.11.4-lp152.2.8.1 |
| openSUSE Leap 15.2 | libdpdk-20_0 | 19.11.4-lp152.2.8.1 |
References
- https://bugzilla.suse.com/1176590
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YBSGY453NNB4LDJYA3J7SNEOJKG5HCAD/
- https://www.suse.com/security/cve/CVE-2020-14374/
- https://www.suse.com/security/cve/CVE-2020-14375/
- https://www.suse.com/security/cve/CVE-2020-14376/
- https://www.suse.com/security/cve/CVE-2020-14377/
- https://www.suse.com/security/cve/CVE-2020-14378/
- https://www.suse.com/support/security/rating/