opensuse-su-2024:10727-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
dpdk-19.11.8-2.7 on GA media
Notes
Title of the patch
dpdk-19.11.8-2.7 on GA media
Description of the patch
These are all security issues fixed in the dpdk-19.11.8-2.7 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-10727
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "dpdk-19.11.8-2.7 on GA media", "title": "Title of the patch" }, { "category": "description", "text": "These are all security issues fixed in the dpdk-19.11.8-2.7 package on the GA media of openSUSE Tumbleweed.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-Tumbleweed-2024-10727", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10727-1.json" }, { "category": "self", "summary": "SUSE CVE CVE-2018-1059 page", "url": "https://www.suse.com/security/cve/CVE-2018-1059/" }, { "category": "self", "summary": "SUSE CVE CVE-2019-14818 page", "url": "https://www.suse.com/security/cve/CVE-2019-14818/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-10722 page", "url": "https://www.suse.com/security/cve/CVE-2020-10722/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-10725 page", "url": "https://www.suse.com/security/cve/CVE-2020-10725/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-14374 page", "url": "https://www.suse.com/security/cve/CVE-2020-14374/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-14375 page", "url": "https://www.suse.com/security/cve/CVE-2020-14375/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-14376 page", "url": "https://www.suse.com/security/cve/CVE-2020-14376/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-14378 page", "url": "https://www.suse.com/security/cve/CVE-2020-14378/" } ], "title": "dpdk-19.11.8-2.7 on GA media", "tracking": { "current_release_date": "2024-06-15T00:00:00Z", "generator": { "date": "2024-06-15T00:00:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2024:10727-1", "initial_release_date": "2024-06-15T00:00:00Z", "revision_history": [ { "date": "2024-06-15T00:00:00Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "dpdk-19.11.8-2.7.aarch64", "product": { "name": "dpdk-19.11.8-2.7.aarch64", "product_id": "dpdk-19.11.8-2.7.aarch64" } }, { "category": "product_version", "name": "dpdk-devel-19.11.8-2.7.aarch64", "product": { "name": "dpdk-devel-19.11.8-2.7.aarch64", "product_id": "dpdk-devel-19.11.8-2.7.aarch64" } }, { "category": "product_version", "name": "dpdk-doc-19.11.8-2.7.aarch64", "product": { "name": "dpdk-doc-19.11.8-2.7.aarch64", "product_id": "dpdk-doc-19.11.8-2.7.aarch64" } }, { "category": "product_version", "name": "dpdk-examples-19.11.8-2.7.aarch64", "product": { "name": "dpdk-examples-19.11.8-2.7.aarch64", "product_id": "dpdk-examples-19.11.8-2.7.aarch64" } }, { "category": "product_version", "name": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64", "product": { "name": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64", "product_id": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64" } }, { "category": "product_version", "name": "dpdk-tools-19.11.8-2.7.aarch64", "product": { "name": "dpdk-tools-19.11.8-2.7.aarch64", "product_id": "dpdk-tools-19.11.8-2.7.aarch64" } }, { "category": "product_version", "name": "libdpdk-20_0-19.11.8-2.7.aarch64", "product": { "name": "libdpdk-20_0-19.11.8-2.7.aarch64", "product_id": "libdpdk-20_0-19.11.8-2.7.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "dpdk-19.11.8-2.7.ppc64le", "product": { "name": "dpdk-19.11.8-2.7.ppc64le", "product_id": "dpdk-19.11.8-2.7.ppc64le" } }, { "category": "product_version", "name": "dpdk-devel-19.11.8-2.7.ppc64le", "product": { "name": "dpdk-devel-19.11.8-2.7.ppc64le", "product_id": "dpdk-devel-19.11.8-2.7.ppc64le" } }, { "category": "product_version", "name": "dpdk-doc-19.11.8-2.7.ppc64le", "product": { "name": "dpdk-doc-19.11.8-2.7.ppc64le", "product_id": "dpdk-doc-19.11.8-2.7.ppc64le" } }, { "category": "product_version", "name": "dpdk-examples-19.11.8-2.7.ppc64le", "product": { "name": "dpdk-examples-19.11.8-2.7.ppc64le", "product_id": "dpdk-examples-19.11.8-2.7.ppc64le" } }, { "category": "product_version", "name": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le", "product": { "name": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le", "product_id": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le" } }, { "category": "product_version", "name": "dpdk-tools-19.11.8-2.7.ppc64le", "product": { "name": "dpdk-tools-19.11.8-2.7.ppc64le", "product_id": "dpdk-tools-19.11.8-2.7.ppc64le" } }, { "category": "product_version", "name": "libdpdk-20_0-19.11.8-2.7.ppc64le", "product": { "name": "libdpdk-20_0-19.11.8-2.7.ppc64le", "product_id": "libdpdk-20_0-19.11.8-2.7.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "dpdk-19.11.8-2.7.s390x", "product": { "name": "dpdk-19.11.8-2.7.s390x", "product_id": "dpdk-19.11.8-2.7.s390x" } }, { "category": "product_version", "name": "dpdk-devel-19.11.8-2.7.s390x", "product": { "name": "dpdk-devel-19.11.8-2.7.s390x", "product_id": "dpdk-devel-19.11.8-2.7.s390x" } }, { "category": "product_version", "name": "dpdk-doc-19.11.8-2.7.s390x", "product": { "name": "dpdk-doc-19.11.8-2.7.s390x", "product_id": "dpdk-doc-19.11.8-2.7.s390x" } }, { "category": "product_version", "name": "dpdk-examples-19.11.8-2.7.s390x", "product": { "name": "dpdk-examples-19.11.8-2.7.s390x", "product_id": "dpdk-examples-19.11.8-2.7.s390x" } }, { "category": "product_version", "name": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x", "product": { "name": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x", "product_id": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x" } }, { "category": "product_version", "name": "dpdk-tools-19.11.8-2.7.s390x", "product": { "name": "dpdk-tools-19.11.8-2.7.s390x", "product_id": "dpdk-tools-19.11.8-2.7.s390x" } }, { "category": "product_version", "name": "libdpdk-20_0-19.11.8-2.7.s390x", "product": { "name": "libdpdk-20_0-19.11.8-2.7.s390x", "product_id": "libdpdk-20_0-19.11.8-2.7.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "dpdk-19.11.8-2.7.x86_64", "product": { "name": "dpdk-19.11.8-2.7.x86_64", "product_id": "dpdk-19.11.8-2.7.x86_64" } }, { "category": "product_version", "name": "dpdk-devel-19.11.8-2.7.x86_64", "product": { "name": "dpdk-devel-19.11.8-2.7.x86_64", "product_id": "dpdk-devel-19.11.8-2.7.x86_64" } }, { "category": "product_version", "name": "dpdk-doc-19.11.8-2.7.x86_64", "product": { "name": "dpdk-doc-19.11.8-2.7.x86_64", "product_id": "dpdk-doc-19.11.8-2.7.x86_64" } }, { "category": "product_version", "name": "dpdk-examples-19.11.8-2.7.x86_64", "product": { "name": "dpdk-examples-19.11.8-2.7.x86_64", "product_id": "dpdk-examples-19.11.8-2.7.x86_64" } }, { "category": "product_version", "name": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64", "product": { "name": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64", "product_id": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64" } }, { "category": "product_version", "name": "dpdk-tools-19.11.8-2.7.x86_64", "product": { "name": "dpdk-tools-19.11.8-2.7.x86_64", "product_id": "dpdk-tools-19.11.8-2.7.x86_64" } }, { "category": "product_version", "name": "libdpdk-20_0-19.11.8-2.7.x86_64", "product": { "name": "libdpdk-20_0-19.11.8-2.7.x86_64", "product_id": "libdpdk-20_0-19.11.8-2.7.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Tumbleweed", "product": { "name": "openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed", "product_identification_helper": { "cpe": "cpe:/o:opensuse:tumbleweed" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "dpdk-19.11.8-2.7.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64" }, "product_reference": "dpdk-19.11.8-2.7.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "dpdk-19.11.8-2.7.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le" }, "product_reference": "dpdk-19.11.8-2.7.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "dpdk-19.11.8-2.7.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x" }, "product_reference": "dpdk-19.11.8-2.7.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "dpdk-19.11.8-2.7.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64" }, "product_reference": "dpdk-19.11.8-2.7.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "dpdk-devel-19.11.8-2.7.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64" }, "product_reference": "dpdk-devel-19.11.8-2.7.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "dpdk-devel-19.11.8-2.7.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le" }, "product_reference": "dpdk-devel-19.11.8-2.7.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "dpdk-devel-19.11.8-2.7.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x" }, "product_reference": "dpdk-devel-19.11.8-2.7.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "dpdk-devel-19.11.8-2.7.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64" }, "product_reference": "dpdk-devel-19.11.8-2.7.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "dpdk-doc-19.11.8-2.7.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64" }, "product_reference": "dpdk-doc-19.11.8-2.7.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "dpdk-doc-19.11.8-2.7.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le" }, "product_reference": "dpdk-doc-19.11.8-2.7.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "dpdk-doc-19.11.8-2.7.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x" }, "product_reference": "dpdk-doc-19.11.8-2.7.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "dpdk-doc-19.11.8-2.7.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64" }, "product_reference": "dpdk-doc-19.11.8-2.7.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "dpdk-examples-19.11.8-2.7.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64" }, "product_reference": "dpdk-examples-19.11.8-2.7.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "dpdk-examples-19.11.8-2.7.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le" }, "product_reference": "dpdk-examples-19.11.8-2.7.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "dpdk-examples-19.11.8-2.7.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x" }, "product_reference": "dpdk-examples-19.11.8-2.7.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "dpdk-examples-19.11.8-2.7.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64" }, "product_reference": "dpdk-examples-19.11.8-2.7.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64" }, "product_reference": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le" }, "product_reference": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x" }, "product_reference": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64" }, "product_reference": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "dpdk-tools-19.11.8-2.7.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64" }, "product_reference": "dpdk-tools-19.11.8-2.7.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "dpdk-tools-19.11.8-2.7.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le" }, "product_reference": "dpdk-tools-19.11.8-2.7.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "dpdk-tools-19.11.8-2.7.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x" }, "product_reference": "dpdk-tools-19.11.8-2.7.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "dpdk-tools-19.11.8-2.7.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64" }, "product_reference": "dpdk-tools-19.11.8-2.7.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libdpdk-20_0-19.11.8-2.7.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64" }, "product_reference": "libdpdk-20_0-19.11.8-2.7.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libdpdk-20_0-19.11.8-2.7.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le" }, "product_reference": "libdpdk-20_0-19.11.8-2.7.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libdpdk-20_0-19.11.8-2.7.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x" }, "product_reference": "libdpdk-20_0-19.11.8-2.7.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libdpdk-20_0-19.11.8-2.7.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64" }, "product_reference": "libdpdk-20_0-19.11.8-2.7.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-1059", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-1059" } ], "notes": [ { "category": "general", "text": "The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-1059", "url": "https://www.suse.com/security/cve/CVE-2018-1059" }, { "category": "external", "summary": "SUSE Bug 1089638 for CVE-2018-1059", "url": "https://bugzilla.suse.com/1089638" }, { "category": "external", "summary": "SUSE Bug 1090647 for CVE-2018-1059", "url": "https://bugzilla.suse.com/1090647" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2018-1059" }, { "cve": "CVE-2019-14818", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2019-14818" } ], "notes": [ { "category": "general", "text": "A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhost_user socket, can send specially crafted VRING_SET_NUM messages, resulting in a memory leak including file descriptors. This flaw could lead to a denial of service condition.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2019-14818", "url": "https://www.suse.com/security/cve/CVE-2019-14818" }, { "category": "external", "summary": "SUSE Bug 1156146 for CVE-2019-14818", "url": "https://bugzilla.suse.com/1156146" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2019-14818" }, { "cve": "CVE-2020-10722", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-10722" } ], "notes": [ { "category": "general", "text": "A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-10722", "url": "https://www.suse.com/security/cve/CVE-2020-10722" }, { "category": "external", "summary": "SUSE Bug 1171477 for CVE-2020-10722", "url": "https://bugzilla.suse.com/1171477" }, { "category": "external", "summary": "SUSE Bug 1171930 for CVE-2020-10722", "url": "https://bugzilla.suse.com/1171930" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2020-10722" }, { "cve": "CVE-2020-10725", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-10725" } ], "notes": [ { "category": "general", "text": "A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vhost-user backend application running on the host, which could result in a loss of connectivity for the other guests running on that host. This is caused by a missing validity check of the descriptor address in the function `virtio_dev_rx_batch_packed()`.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-10725", "url": "https://www.suse.com/security/cve/CVE-2020-10725" }, { "category": "external", "summary": "SUSE Bug 1171477 for CVE-2020-10725", "url": "https://bugzilla.suse.com/1171477" }, { "category": "external", "summary": "SUSE Bug 1171927 for CVE-2020-10725", "url": "https://bugzilla.suse.com/1171927" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.7, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2020-10725" }, { "cve": "CVE-2020-14374", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-14374" } ], "notes": [ { "category": "general", "text": "A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A flawed bounds checking in the copy_data function leads to a buffer overflow allowing an attacker in a virtual machine to write arbitrary data to any address in the vhost_crypto application. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-14374", "url": "https://www.suse.com/security/cve/CVE-2020-14374" }, { "category": "external", "summary": "SUSE Bug 1176590 for CVE-2020-14374", "url": "https://bugzilla.suse.com/1176590" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2020-14374" }, { "cve": "CVE-2020-14375", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-14375" } ], "notes": [ { "category": "general", "text": "A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. Virtio ring descriptors, and the data they describe are in a region of memory accessible by from both the virtual machine and the host. An attacker in a VM can change the contents of the memory after vhost_crypto has validated it. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-14375", "url": "https://www.suse.com/security/cve/CVE-2020-14375" }, { "category": "external", "summary": "SUSE Bug 1176590 for CVE-2020-14375", "url": "https://bugzilla.suse.com/1176590" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2020-14375" }, { "cve": "CVE-2020-14376", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-14376" } ], "notes": [ { "category": "general", "text": "A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A lack of bounds checking when copying iv_data from the VM guest memory into host memory can lead to a large buffer overflow. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-14376", "url": "https://www.suse.com/security/cve/CVE-2020-14376" }, { "category": "external", "summary": "SUSE Bug 1176590 for CVE-2020-14376", "url": "https://bugzilla.suse.com/1176590" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2020-14376" }, { "cve": "CVE-2020-14378", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-14378" } ], "notes": [ { "category": "general", "text": "An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc` function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause `move_desc` to get stuck in a 4,294,967,295-count iteration loop. Depending on how `vhost_crypto` is being used this could prevent other VMs or network tasks from being serviced by the busy DPDK lcore for an extended period.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-14378", "url": "https://www.suse.com/security/cve/CVE-2020-14378" }, { "category": "external", "summary": "SUSE Bug 1176590 for CVE-2020-14378", "url": "https://bugzilla.suse.com/1176590" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.8, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x", "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x", "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x", "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2020-14378" } ] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…