{"schemaVersion":3,"id":"OPENSUSE-SU-2020:1599-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for dpdk\n\nThis update for dpdk fixes the following issues:\n\n- dpdk was updated to 19.11.4\n  - CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,CVE-2020-14377,CVE-2020-14378: Fixed multiple issues where a malicious guest could\n    harm the host using vhost crypto, including executing code in host (VM Escape), reading host application memory space to guest\n    and causing partially denial of service in the host(bsc#1176590).\n- For a list of fixes check:\n  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8\n  denial of service in the host (bsc#1176590).\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","dates":{"published":"2020-10-03T22:22:25.000Z","modified":"2026-02-04T04:17:12.023Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"opensuse","product":"dpdk&distro=openSUSE Leap 15.2","name":"dpdk","label":"dpdk&distro=openSUSE Leap 15.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/dpdk&distro=openSUSE Leap 15.2","purlType":"rpm","versions":[{"text":"< 19.11.4-lp152.2.8.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.11.4-lp152.2.8.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YBSGY453NNB4LDJYA3J7SNEOJKG5HCAD/","label":"lists.opensuse.org/archives/…","hostname":"lists.opensuse.org","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1176590","label":"bugzilla.suse.com/1176590","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14374","label":"www.suse.com/security/cve/CVE-2020-14374","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14375","label":"www.suse.com/security/cve/CVE-2020-14375","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14376","label":"www.suse.com/security/cve/CVE-2020-14376","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14377","label":"www.suse.com/security/cve/CVE-2020-14377","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14378","label":"www.suse.com/security/cve/CVE-2020-14378","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2020-14374","CVE-2020-14375","CVE-2020-14376","CVE-2020-14377","CVE-2020-14378"],"downstream":[],"duplicates":[],"related":["CVE-2020-14374","CVE-2020-14375","CVE-2020-14376","CVE-2020-14377","CVE-2020-14378"]},"timeline":[{"kind":"published","date":"2020-10-03T22:22:25.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T04:17:12.023Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T00:21:24.104Z","stale":false,"partial":false}}