Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:1552-1

Опубликовано: 08 июн. 2020
Источник: suse-cvrf

Описание

Security update for dpdk

This update for dpdk fixes the following issues:

  • CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171930).
  • CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171925).
  • CVE-2020-10724: Fixed a missing inputs validation in Vhost-crypto (bsc#1171926).

Список пакетов

SUSE Linux Enterprise Server 12 SP5
dpdk-18.11.3-3.9.2
dpdk-kmp-default-18.11.3_k4.12.14_122.20-3.9.2
dpdk-thunderx-18.11.3-3.9.2
dpdk-thunderx-kmp-default-18.11.3_k4.12.14_122.20-3.9.2
dpdk-tools-18.11.3-3.9.2
libdpdk-18_11-18.11.3-3.9.2
SUSE Linux Enterprise Server for SAP Applications 12 SP5
dpdk-18.11.3-3.9.2
dpdk-kmp-default-18.11.3_k4.12.14_122.20-3.9.2
dpdk-thunderx-18.11.3-3.9.2
dpdk-thunderx-kmp-default-18.11.3_k4.12.14_122.20-3.9.2
dpdk-tools-18.11.3-3.9.2
libdpdk-18_11-18.11.3-3.9.2
SUSE Linux Enterprise Software Development Kit 12 SP5
dpdk-devel-18.11.3-3.9.2
dpdk-thunderx-devel-18.11.3-3.9.2

Ссылки

Описание

A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:dpdk-18.11.3-3.9.2
SUSE Linux Enterprise Server 12 SP5:dpdk-kmp-default-18.11.3_k4.12.14_122.20-3.9.2
SUSE Linux Enterprise Server 12 SP5:dpdk-thunderx-18.11.3-3.9.2
SUSE Linux Enterprise Server 12 SP5:dpdk-thunderx-kmp-default-18.11.3_k4.12.14_122.20-3.9.2
Ссылки

Описание

A memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an integer truncation on the index of a payload. Under certain circumstances, the index (a UInt) is copied and truncated into a uint16, which can lead to out of bound indexing and possible memory corruption.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:dpdk-18.11.3-3.9.2
SUSE Linux Enterprise Server 12 SP5:dpdk-kmp-default-18.11.3_k4.12.14_122.20-3.9.2
SUSE Linux Enterprise Server 12 SP5:dpdk-thunderx-18.11.3-3.9.2
SUSE Linux Enterprise Server 12 SP5:dpdk-thunderx-kmp-default-18.11.3_k4.12.14_122.20-3.9.2
Ссылки

Описание

A vulnerability was found in DPDK versions 18.11 and above. The vhost-crypto library code is missing validations for user-supplied values, potentially allowing an information leak through an out-of-bounds memory read.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:dpdk-18.11.3-3.9.2
SUSE Linux Enterprise Server 12 SP5:dpdk-kmp-default-18.11.3_k4.12.14_122.20-3.9.2
SUSE Linux Enterprise Server 12 SP5:dpdk-thunderx-18.11.3-3.9.2
SUSE Linux Enterprise Server 12 SP5:dpdk-thunderx-kmp-default-18.11.3_k4.12.14_122.20-3.9.2
Ссылки
Уязвимость SUSE-SU-2020:1552-1