[SECURITY] [DSA 4567-1] dpdk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4567-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 12, 2019 https://www.debian.org/security/faq -...

CVE-2019-14818

A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhostuser socket, can send specially crafted VRINGSETNUM messages, resulting in a memory leak including file...

UBUNTU-CVE-2019-14818

A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhostuser socket, can send specially crafted VRINGSETNUM messages, resulting in a memory leak including file...

PT-2019-5188

Name of the Vulnerable Software and Affected Versions dpdk versions 16.x.x through 16.11.9 dpdk versions 17.x.x through 17.11.7 dpdk versions 18.x.x through 18.11.3 dpdk versions 19.x.x through 19.08.0 Description The issue is related to an uncontrolled resource consumption in the dpdk library an...

DSA-4567-1 dpdk - security update

Bulletin has no description...

PT-2020-3618

Name of the Vulnerable Software and Affected Versions DPDK versions 18.11 and above Description A vulnerability in the vhost-crypto library code is related to missing validations for user-supplied values. This could potentially allow an information leak through an out-of-bounds memory read. The...

Information Disclosure

dpdk is vulnerable to information disclosure. A malicious guest is able to expose the memory of vhost-user backend process memory. This is due to lack of verification for all requested guest physical ranges be mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresse...

Fedora 28 : 2:dpdk (2018-2c965abb15)

Update to latest 17.11 LTS fixes bz 1571352 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

openSUSE Security Update : openvswitch (openSUSE-2018-1562)

This update for openvswitch to version 2.7.6 fixes the following issues : These security issues were fixed : - CVE-2018-17205: Prevent OVS crash when reverting old flows in bundle commit bsc1104467. - CVE-2018-17206: Avoid buffer overread in BUNDLE action decoding bsc1104467. - CVE-2018-17204:Whe...

Security update for openvswitch (moderate)

This update for openvswitch to version 2.7.6 fixes the following issues: These security issues were fixed: - CVE-2018-17205: Prevent OVS crash when reverting old flows in bundle commit bsc1104467. - CVE-2018-17206: Avoid buffer overread in BUNDLE action decoding bsc1104467. - CVE-2018-17204:When...

openSUSE: Security Advisory for dpdk (openSUSE-SU-2018:4003-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for dpdk (moderate)

This update for dpdk to version 16.11.8 provides the following security fix: - CVE-2018-1059: restrict untrusted guest to misuse virtio to corrupt host application ovs-dpdk memory which could have lead all VM to lose connectivity bsc1089638 and following non-security fixes: - Enable the broadcom...

openSUSE Security Update : dpdk (openSUSE-2018-1484)

This update for dpdk to version 16.11.8 provides the following security fix : - CVE-2018-1059: restrict untrusted guest to misuse virtio to corrupt host application ovs-dpdk memory which could have lead all VM to lose connectivity bsc1089638 and following non-security fixes : - Enable the broadco...

SUSE SLES12 Security Update : dpdk (SUSE-SU-2018:3923-1)

This update for dpdk to version 16.11.8 provides the following security fix : CVE-2018-1059: restrict untrusted guest to misuse virtio to corrupt host application ovs-dpdk memory which could have lead all VM to lose connectivity bsc1089638 and following non-security fixes: Enable the broadcom...

SUSE-SU-2018:3923-1 Security update for dpdk

This update for dpdk to version 16.11.8 provides the following security fix: - CVE-2018-1059: restrict untrusted guest to misuse virtio to corrupt host application ovs-dpdk memory which could have lead all VM to lose connectivity bsc1089638 and following non-security fixes: - Enable the broadcom...

PT-2020-3609

Name of the Vulnerable Software and Affected Versions DPDK versions 18.05 and above Description A vulnerability was found in the vhost user set log base function, related to an integer overflow. This could result in a smaller memory map than requested, possibly allowing memory corruption. The...

Moderate: Red Hat Security Advisory: openvswitch security and bug fix update

An update for openvswitch is now available for Red Hat OpenStack Platform 12.0 Pike. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

PT-2020-3572 · Intel +6 · Dpdk +6

Name of the Vulnerable Software and Affected Versions: DPDK versions 17.05 and above Description: A memory corruption issue was found, caused by an integer truncation on the index of a payload. Under certain circumstances, the index a UInt is copied and truncated into a uint16, which can lead to...

Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 10 Security, Bug Fix, and Enhancement Advisory

An update is now available for Red Hat OpenStack Platform 10.0 Newton for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 7 : dpdk (RHSA-2018:2038)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2038 advisory. The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space...