SUSE-SU-2020:2770-1: dpdk-thunderx&distro=SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2020:2770-1 is a vulnerability in dpdk-thunderx&distro=SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 5 · Downstream 0 · Related 5Timeline
- 28-09-2020PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for dpdk This update for dpdk fixes the following issues: - dpdk was updated to 19.11.4 - CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,CVE-2020-14377,CVE-2020-14378: Fixed multiple issues where a malicious guest could harm the host using vhost crypto, including executing code in host (VM Escape), reading host application memory space to guest and causing partially denial of service in the host(bsc#1176590). - For a list of fixes check: https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8 denial of service in the host (bsc#1176590).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse3 products
- dpdk-thunderx&distro=SUSE Linux Enterprise Module for Server Applications 15 SP2< 19.11.4-3.9.1
- dpdk&distro=SUSE Linux Enterprise Module for Package Hub 15 SP2< 19.11.4-3.9.1
- dpdk&distro=SUSE Linux Enterprise Module for Server Applications 15 SP2< 19.11.4-3.9.1
1 vendor · 3 products