CVE-2020-14375
Fixed in a distro release EPSS <1%
A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. Virtio ring descriptors, and the data they describe are in a region of memory accessible by from both the virtual machine and the host. An attacker in a VM can change the contents of the memory after vhost_crypto has validated it. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Products: dpdk data_plane_development_kit, canonical ubuntu_linux, opensuse leap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | dpdk | 19.11.5-1 |
| Debian 13 | dpdk | 19.11.5-1 |
| Debian 14 | dpdk | 19.11.5-1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | dpdk | 18.11.9-3.25.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | dpdk-thunderx | 18.11.9-3.25.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | dpdk | 18.11.9-3.25.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | dpdk-thunderx | 18.11.9-3.25.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP2 | dpdk | 19.11.4-3.9.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP1 | dpdk | 18.11.9-4.12.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP2 | dpdk | 19.11.4-3.9.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP2 | dpdk-thunderx | 19.11.4-3.9.1 |
| SUSE Linux Enterprise Server 12 SP5 | dpdk | 18.11.9-3.15.1 |
| SUSE Linux Enterprise Server 12 SP5 | dpdk-thunderx | 18.11.9-3.15.1 |
| SUSE Linux Enterprise Server 15-LTSS | dpdk | 18.11.9-3.25.1 |
| SUSE Linux Enterprise Server 15-LTSS | dpdk-thunderx | 18.11.9-3.25.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | dpdk | 18.11.9-3.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | dpdk-thunderx | 18.11.9-3.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | dpdk | 18.11.9-3.25.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | dpdk | 18.11.9-3.15.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | dpdk-thunderx | 18.11.9-3.15.1 |
| Ubuntu 20.04 LTS | dpdk | 19.11.3-0ubuntu0.2 |
| openSUSE Leap 15.1 | dpdk | 18.11.9-lp151.3.8.1 |
| openSUSE Leap 15.2 | dpdk | 19.11.4-lp152.2.8.1 |
| openSUSE Tumbleweed | dpdk | 19.11.8-2.7 |