The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. Virtio ring descriptors, and the data they describe are in a region of memory accessible by from both the virtual machine and the host. An attacker in a VM can change the contents of the memory after vhost_crypto has validated it. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade dpdk | Jul 30, 2024 | Sep 30, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade dpdkUpgrade dpdk-devel | Feb 3, 2021 | Sep 30, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade dpdkUpgrade dpdk-develUpgrade dpdk-tools | Nov 3, 2020 | Sep 30, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade dpdk-toolsUpgrade dpdk | Nov 3, 2020 | Sep 30, 2020 |
| Suse | — | Upgrade dpdk-examplesUpgrade libdpdk-18_11Upgrade dpdkUpgrade dpdk-develUpgrade dpdk-kmp-defaultUpgrade dpdk-toolsUpgrade dpdk-thunderx-kmp-defaultUpgrade dpdk-thunderxUpgrade dpdk-docUpgrade dpdk-kmp-preemptUpgrade libdpdk-20_0Upgrade dpdk-thunderx-devel | Sep 29, 2020 | Sep 28, 2020 |
| Ubuntu | — | Upgrade dpdk | Sep 29, 2020 | Sep 28, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub