8455 matches found
openSUSE: Security Advisory for dpdk (openSUSE-SU-2020:1593-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
OPENSUSE-SU-2020:1599-1 Security update for dpdk
This update for dpdk fixes the following issues: - dpdk was updated to 19.11.4 - CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,CVE-2020-14377,CVE-2020-14378: Fixed multiple issues where a malicious guest could harm the host using vhost crypto, including executing code in host VM Escape, reading ho...
OPENSUSE-SU-2020:1593-1 Security update for dpdk
This update for dpdk fixes the following issues: - dpdk was updated to 18.11.9. For a list of fixes check: - CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,CVE-2020-14377,CVE-2020-14378: Fixed multiple issues where a malicious guest could harm the host using vhost crypto, including executing code i...
CVE-2020-14378
An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the movedesc function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause movedesc to get stuck in a 4,294,967,295-count iteration loop. Depending on how vhostcrypto is...
CVE-2020-14376
A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A lack of bounds checking when copying ivdata from the VM guest memory into host memory can lead to a large buffer overflow. The highest threat from this vulnerability is to data confidentiality and integrity as well as syst...
CVE-2020-14376
A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A lack of bounds checking when copying ivdata from the VM guest memory into host memory can lead to a large buffer overflow. The highest threat from this vulnerability is to data confidentiality and integrity as well as syst...
CVE-2020-14376
A flaw was found in dpdk. A lack of bounds checking when copying ivdata from the VM guest memory into host memory can lead to a large buffer overflow. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
Remote Code Execution
dpdk is vulnerable to remote code execution. An attacker to is able to execute arbitrary code on the host OS remotely due to a VM escape vulnerability in vhostcrypto...
SUSE-SU-2020:2770-1 Security update for dpdk
This update for dpdk fixes the following issues: - dpdk was updated to 19.11.4 - CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,CVE-2020-14377,CVE-2020-14378: Fixed multiple issues where a malicious guest could harm the host using vhost crypto, including executing code in host VM Escape, reading ho...
SUSE-SU-2020:2769-1 Security update for dpdk
This update for dpdk fixes the following issues: - dpdk was updated to 18.11.9. For a list of fixes check: - CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,CVE-2020-14377,CVE-2020-14378: Fixed multiple issues where a malicious guest could harm the host using vhost crypto, including executing code i...
SUSE-SU-2020:2768-1 Security update for dpdk
This update for dpdk fixes the following issues: - dpdk was updated to 18.11.9. For a list of fixes check: - CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,CVE-2020-14377,CVE-2020-14378: Fixed multiple issues where a malicious guest could harm the host using vhost crypto, including executing code i...
SUSE-SU-2020:2767-1 Security update for dpdk
This update for dpdk fixes the following issues: - dpdk was updated to 18.11.9. For a list of fixes check: - CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,CVE-2020-14377,CVE-2020-14378: Fixed multiple issues where a malicious guest could harm the host using vhost crypto, including executing code i...
cPanel SRS Key Vulnerability
cPanel is a set of Web-based host control management system of the U.S. cPanel. A vulnerability exists in cPanel versions prior to 88.0.3 in which the template VM uses an insecure SRS key. No detailed vulnerability details are provided at this time...
Oracle VM VirtualBox Core Code Execution Vulnerability
Oracle VM VirtualBox is a virtual machine management software from Oracle. A security vulnerability exists in Oracle VM VirtualBox Core versions prior to 6.1.16 that allows a low-privileged attacker to compromise Oracle VM VirtualBox by logging on to the infrastructure on which Oracle VM VirtualB...
CVE-2020-26104
In cPanel before 88.0.3, an insecure SRS secret is used on a templated VM SEC-552...
CVE-2020-26105
In cPanel before 88.0.3, insecure chkservd test credentials are used on a templated VM SEC-554...
CVE-2020-26101
In cPanel before 88.0.3, insecure RNDC credentials are used for BIND on a templated VM SEC-549...
Default credentials
In cPanel before 88.0.3, insecure RNDC credentials are used for BIND on a templated VM SEC-549...