Download
| Alert*
oval:org.secpod.oval:def:114562
dpdk is installed oval:org.secpod.oval:def:605123 dpdk is installed oval:org.secpod.oval:def:704070 dpdk is installed oval:org.secpod.oval:def:89046735 This update of dpdk fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues oval:org.secpod.oval:def:89046731 This update of dpdk fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues oval:org.secpod.oval:def:89046734 This update of dpdk fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues oval:org.secpod.oval:def:89046737 This update of dpdk fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues oval:org.secpod.oval:def:89046733 This update of dpdk fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues oval:org.secpod.oval:def:89002297 This update for dpdk to version 16.11.8 provides the following security fix: - CVE-2018-1059: restrict untrusted guest to misuse virtio to corrupt host application memory which could have lead all VM to lose connectivity and following non-security fixes: - Enable the broadcom chipset family Broadc ... oval:org.secpod.oval:def:64145 Multiple vulnerabilities were discovered in the vhost code of DPDK, a set of libraries for fast packet processing, which could result in denial of service or the execution of arbitrary code by malicious guests/containers. oval:org.secpod.oval:def:504767 The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space. The following packages have been upgraded to a later upstream version: dpdk . Security Fix: * dpdk: librte_vhost Malicious guest could cause segfault by se ... oval:org.secpod.oval:def:89002955 This update for dpdk fixes the following issues: Security issues fixed: - CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base . - CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair . - CVE-2020-10724: Fixed a missing inputs validation in Vhost-crypt ... oval:org.secpod.oval:def:89002937 This update for dpdk fixes the following issues: - CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base . - CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair . - CVE-2020-10724: Fixed a missing inputs validation in Vhost-crypto . oval:org.secpod.oval:def:503631 The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space. The following packages have been upgraded to a later upstream version: dpdk . Security Fix: * dpdk: possible memory leak leads to denial of service For mo ... oval:org.secpod.oval:def:89002995 This update for dpdk to 17.11.7 fixes the following issues: Security issues fixed: - CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base . - CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair . oval:org.secpod.oval:def:89003128 This update for dpdk to version 17.11.7 fixes the following issues: - CVE-2019-14818: Fixed a memory leak vulnerability caused by a malicious container may lead to to denial of service . oval:org.secpod.oval:def:507347 The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space. Security Fix: * dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs * DPDK: out-of-bounds read/write in vhost_user_set_i ... oval:org.secpod.oval:def:89047814 This update of dpdk fixes the following issue: - Fix to read PCI device name as UTF strings - Allow configuring thread granularity of Kernel NIC Interface - Rebuild with new secure boot key due to grub2 boothole 3 issues oval:org.secpod.oval:def:89047355 This update of dpdk fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues oval:org.secpod.oval:def:89048547 This update of dpdk fixes the following issues: * rebuild the package with the new secure boot key . oval:org.secpod.oval:def:89048618 This update of dpdk fixes the following issues: * rebuild the package with the new secure boot key . oval:org.secpod.oval:def:89048538 This update of dpdk fixes the following issues: * rebuild the package with the new secure boot key . oval:org.secpod.oval:def:89048528 This update of dpdk fixes the following issues: * rebuild the package with the new secure boot key . oval:org.secpod.oval:def:89048631 This update of dpdk fixes the following issues: * rebuild the package with the new secure boot key . oval:org.secpod.oval:def:114561 The Data Plane Development Kit is a set of libraries and drivers for fast packet processing in the user space. oval:org.secpod.oval:def:704078 dpdk: set of libraries for fast packet processing Details: USN-3642-1 fixed a vulnerability in DPDK. This update provides the corresponding update for Ubuntu 17.10. Original advisory DPDK could be made to expose sensitive information over the network. oval:org.secpod.oval:def:704069 dpdk: set of libraries for fast packet processing DPDK could be made to expose sensitive information over the network. oval:org.secpod.oval:def:51038 dpdk: set of libraries for fast packet processing DPDK could be made to expose sensitive information over the network. oval:org.secpod.oval:def:502328 The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space. Security Fix: * dpdk: Information exposure in unchecked guest physical to host virtual address translations For more details about the security issue, incl ... oval:org.secpod.oval:def:3300505 SUSE Security Update: Security update for dpdk oval:org.secpod.oval:def:89047367 This update for dpdk fixes the following issues: Security: - CVE-2021-3839: Fixed a memory corruption issue during vhost-user communication . - CVE-2022-0669: Fixed a denial of service that could be triggered by a vhost-user master . Bugfixes: - kni: allow configuring thread granularity . - Fixed re ... oval:org.secpod.oval:def:89046730 This update for dpdk fixes the following issues: - CVE-2021-3839: Fixed a memory corruption issue during vhost-user communication . - CVE-2022-0669: Fixed a denial of service that could be triggered by a vhost-user master . - rebuild with new secure boot key due to grub2 boothole 3 issues oval:org.secpod.oval:def:3300740 SUSE Security Update: Security update for dpdk oval:org.secpod.oval:def:88348 Two vulnerabilities were discovered in the vhost code of DPDK, a set of libraries for fast packet processing, which could result in denial of service or the execution of arbitrary code. The oldstable distribution is not affected. oval:org.secpod.oval:def:89049754 This update is the initial delivery of the Azure flavor of the Linux Kernel, which contains enhancements and optimizations for running the SUSE Linux Enterprise kernel in the Azure cloud. oval:org.secpod.oval:def:89050276 This update for dpdk to version 18.11.3 fixes the following issues: Security issue fixed: - CVE-2019-14818: Fixed a denial of service by a malicious container via the vhost-user socket . Non-security issue fixed: - Added current version to the PMD driver directory to avoid loading previous version d ... oval:org.secpod.oval:def:89050512 This update for dpdk fixes the following issues: Security issues fixed: - CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base . - CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair . - CVE-2020-10724: Fixed a missing inputs validation in Vhost-crypt ... oval:org.secpod.oval:def:89050277 This update for dpdk fixes the following issues: - dpdk was updated to 18.11.9. For a list of fixes check: - CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,CVE-2020-14377,CVE-2020-14378: Fixed multiple issues where a malicious guest could harm the host using vhost crypto, including executing code in h ... oval:org.secpod.oval:def:2004040 A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A complete lack of validation of attacker-controlled parameters can lead to a buffer over read. The results of the over read are then written back to the guest virtual machine memory. This vulnerability can be used by an attack ... oval:org.secpod.oval:def:2004042 A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. Virtio ring descriptors, and the data they describe are in a region of memory accessible by from both the virtual machine and the host. An attacker in a VM can change the contents of the memory after vhost_crypto has validated ... oval:org.secpod.oval:def:2004041 A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A lack of bounds checking when copying iv_data from the VM guest memory into host memory can lead to a large buffer overflow. The highest threat from this vulnerability is to data confidentiality and integrity as well as system ... oval:org.secpod.oval:def:2004043 A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A flawed bounds checking in the copy_data function leads to a buffer overflow allowing an attacker in a virtual machine to write arbitrary data to any address in the vhost_crypto application. The highest threat from this vulner ... oval:org.secpod.oval:def:89050264 This update for dpdk fixes the following issues: - dpdk was updated to 19.11.4 - CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,CVE-2020-14377,CVE-2020-14378: Fixed multiple issues where a malicious guest could harm the host using vhost crypto, including executing code in host , reading host applicati ... oval:org.secpod.oval:def:89050537 This update of dpdk to version 18.11.3 provides the following fixes: dpdk was updated to 18.11.3 Security issue fixed: - CVE-2019-14818: Fixed a memory leak vulnerability caused by a malicius container may lead to to denial of service . Other issues addressed: - Fixed a regression by inserting vers ... oval:org.secpod.oval:def:1506356 [21.11-2] - Backport fixes for CVE-2022-2132 oval:org.secpod.oval:def:1506257 [21.11.2-1] - Rebase to 21.11.2 - Includes fixes for CVE-2022-2132 and CVE-2022-28199 [21.11.1-1] - Rebase to 21.11.1 - Includes fix for CVE-2021-3839 oval:org.secpod.oval:def:3300604 SUSE Security Update: Security update for dpdk oval:org.secpod.oval:def:2600095 The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space. oval:org.secpod.oval:def:89047007 This update for dpdk fixes the following issues: - CVE-2022-2132: Fixed DoS when a vhost header crosses more than two descriptors and exhausts all mbufs . oval:org.secpod.oval:def:89046997 This update for dpdk fixes the following issues: - CVE-2022-2132: Fixed DoS when a vhost header crosses more than two descriptors and exhausts all mbufs . - CVE-2022-28199: Fixed buffer overflow in the vhost code . oval:org.secpod.oval:def:89047368 This update for dpdk fixes the following issues: - CVE-2022-2132: Fixed DoS when a vhost header crosses more than two descriptors and exhausts all mbufs . - CVE-2022-28199: Fixed buffer overflow in the vhost code . oval:org.secpod.oval:def:89046993 This update for dpdk fixes the following issues: - CVE-2022-2132: Fixed DoS when a vhost header crosses more than two descriptors and exhausts all mbufs . oval:org.secpod.oval:def:2500916 The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space. oval:org.secpod.oval:def:89047756 This update for dpdk fixes the following issues: - CVE-2022-2132: Fixed DoS when a vhost header crosses more than two descriptors and exhausts all mbufs . - CVE-2022-28199: Fixed buffer overflow in the vhost code . oval:org.secpod.oval:def:89047034 This update for dpdk fixes the following issues: - CVE-2022-2132: Fixed DoS when a vhost header crosses more than two descriptors and exhausts all mbufs . oval:org.secpod.oval:def:5800080 The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space. Security Fix: * dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs * DPDK: out-of-bounds read/write in vhost_user_set_i ... oval:org.secpod.oval:def:88592 dpdk: set of libraries for fast packet processing DPDK could be made to stop responding if it received specially crafted network traffic. oval:org.secpod.oval:def:4501211 The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space. Security Fix: * dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs For more details about the security issue, including ... oval:org.secpod.oval:def:2004039 An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc` function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause `move_desc` to get stuck in a 4,294,967,295-count iteration loop. Depending on how `vhost_crypto ... oval:org.secpod.oval:def:68009 The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space. The following packages have been upgraded to a later upstream version: dpdk . Security Fix: * dpdk: librte_vhost Malicious guest could cause segfault by se ... oval:org.secpod.oval:def:2500120 The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space. oval:org.secpod.oval:def:604854 Multiple vulnerabilities were discovered in the vhost code of DPDK, a set of libraries for fast packet processing, which could result in denial of service or the execution of arbitrary code by malicious guests/containers. oval:org.secpod.oval:def:705280 dpdk: set of libraries for fast packet processing DPDK could be made to consume resources if it received specially crafted input. oval:org.secpod.oval:def:69785 It was discovered that the vhost PMD in DPDK, a set of libraries for fast packet processing, was affected by memory and file descriptor leaks which could result in denial of service. oval:org.secpod.oval:def:89000492 This update for dpdk to version 18.11.3 fixes the following issues: dpdk was updated to 18.11.3 Security issue fixed: - CVE-2019-14818: Fixed a memory leak vulnerability caused by a malicious container may lead to to denial of service . Other issues addressed: - Changed to multibuild . - Fixed a reg ... oval:org.secpod.oval:def:89051198 This update of dpdk fixes the following issues: * rebuild the package with the new secure boot key . |