• DPDK vulnerabilities

    From bugz_ubuntu@21:4/110 to Ubuntu Users on Monday, September 28, 2020 16:10:02
    dpdk vulnerabilities

    A security issue affects these releases of Ubuntu and its
    derivatives:

    * Ubuntu 20.04 LTS

    Summary

    Several security issues were fixed in DPDK.

    Software Description

    * dpdk - set of libraries for fast packet processing

    Details

    Ryan Hall discovered that DPDK incorrectly handled vhost crypto.
    An attacker inside a guest could use these issues to perform
    multiple attacks, including denial of service attacks, obtaining
    sensitive information from the host, and possibly executing
    arbitrary code on the host.

    Update instructions

    The problem can be corrected by updating your system to the
    following package versions:

    Ubuntu 20.04 LTS
    dpdk - 19.11.3-0ubuntu0.2

    To update your system, please follow these instructions:
    https://wiki.ubuntu.com/Security/Upgrades.

    In general, a standard system update will make all the necessary
    changes.

    References

    * CVE-2020-14374
    * CVE-2020-14375
    * CVE-2020-14376
    * CVE-2020-14377
    * CVE-2020-14378

    --- Mystic BBS v1.12 A46 (Linux/64)
    * Origin: BZ&BZ BBS (21:4/110)