USN-4550-1: DPDK vulnerabilities
Ryan Hall discovered that DPDK incorrectly handled vhost crypto. An attacker inside a guest could use these issues to perform multiple attacks, including denial of service attacks, obtaining sensitive information from the host, and possibly executing arbitrary code on the host.
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for these DPDK vulnerabilities?
The vulnerability ID for these DPDK vulnerabilities is USN-4550-1.
What is the severity of USN-4550-1?
The severity of USN-4550-1 is not specified in the provided information.
How can an attacker exploit the DPDK vulnerabilities described in USN-4550-1?
An attacker inside a guest could exploit these vulnerabilities to perform various attacks, including denial of service attacks, obtaining sensitive information from the host, and possibly executing arbitrary code on the host.
Which versions of DPDK are affected by USN-4550-1?
DPDK version 19.11.3-0ubuntu0.2 is affected by USN-4550-1.
How can I fix the DPDK vulnerabilities described in USN-4550-1?
To fix the DPDK vulnerabilities described in USN-4550-1, update to version 19.11.3-0ubuntu0.2 of the dpdk package.