- Vulnerability/
- USN-4550-1
USN-4550-1: DPDK vulnerabilities
First published: Mon Sep 28 2020(Updated: )
Ryan Hall discovered that DPDK incorrectly handled vhost crypto. An attacker inside a guest could use these issues to perform multiple attacks, including denial of service attacks, obtaining sensitive information from the host, and possibly executing arbitrary code on the host.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/dpdk | <19.11.3-0ubuntu0.2 | 19.11.3-0ubuntu0.2 |
| =20.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2020-14374
- https://ubuntu.com/security/CVE-2020-14375
- https://ubuntu.com/security/CVE-2020-14376
- https://ubuntu.com/security/CVE-2020-14377
- https://ubuntu.com/security/CVE-2020-14378
- https://launchpad.net/ubuntu/+source/dpdk/19.11.3-0ubuntu0.2
- https://ubuntu.com/security/notices/USN-4550-1 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
Frequently Asked Questions
What is the vulnerability ID for these DPDK vulnerabilities?
The vulnerability ID for these DPDK vulnerabilities is USN-4550-1.
What is the severity of USN-4550-1?
The severity of USN-4550-1 is not specified in the provided information.
How can an attacker exploit the DPDK vulnerabilities described in USN-4550-1?
An attacker inside a guest could exploit these vulnerabilities to perform various attacks, including denial of service attacks, obtaining sensitive information from the host, and possibly executing arbitrary code on the host.
Which versions of DPDK are affected by USN-4550-1?
DPDK version 19.11.3-0ubuntu0.2 is affected by USN-4550-1.
How can I fix the DPDK vulnerabilities described in USN-4550-1?
To fix the DPDK vulnerabilities described in USN-4550-1, update to version 19.11.3-0ubuntu0.2 of the dpdk package.
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/20.04