USN-4550-1: DPDK vulnerabilities

Releases

• Ubuntu 20.04 LTS

Packages

• dpdk - set of libraries for fast packet processing

Details

Ryan Hall discovered that DPDK incorrectly handled vhost crypto. An
attacker inside a guest could use these issues to perform multiple attacks,
including denial of service attacks, obtaining sensitive information from
the host, and possibly executing arbitrary code on the host.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 20.04

• dpdk - 19.11.3-0ubuntu0.2

In general, a standard system update will make all the necessary changes.

References

• CVE-2020-14374
• CVE-2020-14375
• CVE-2020-14376
• CVE-2020-14377
• CVE-2020-14378