CVE-2020-14375

Priority
Description
A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5.
Virtio ring descriptors, and the data they describe are in a region of
memory accessible by from both the virtual machine and the host. An
attacker in a VM can change the contents of the memory after vhost_crypto
has validated it. The highest threat from this vulnerability is to data
confidentiality and integrity as well as system availability.
Assigned-to
mdeslaur
Notes
Package
Source: dpdk (LP Ubuntu Debian)
Upstream:needs-triage
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (code not present)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (code not present)
Ubuntu 20.04 LTS (Focal Fossa):released (19.11.3-0ubuntu0.2)
Ubuntu 20.10 (Groovy Gorilla):released (19.11.5-1)
More Information

Updated: 2020-10-15 02:27:09 UTC (commit c422c0bce0600d2a0b7af63177d967cd3f564a78)