From: luca.boccassi@gmail.com
To: announce@dpdk.org
Subject: [dpdk-announce] DPDK 19.11.5 released
Date: Mon, 28 Sep 2020 16:22:08 +0100 [thread overview]
Message-ID: <20200928152208.2857501-1-luca.boccassi@gmail.com> (raw)
Hi all,
Here is a new stable release:
https://fast.dpdk.org/rel/dpdk-19.11.5.tar.xz
The git tree is at:
https://dpdk.org/browse/dpdk-stable/?h=19.11
This release fixes the following security issues:
CVE: CVE-2020-14374
Severity: 8.8 (High)
CVSS scores: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description: dpdk: Remote Code Execution in vhost_crypto (VM Escape)
CVE: CVE-2020-14375
Severity: 7.8 (High)
CVSS scores: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Description: dpdk: Time-of-check time-of-use vulnerabilities throughout
vhost_crypto.c
CVE: CVE-2020-14376
Severity: 7.8 (High)
CVSS scores: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Description: dpdk: Buffer overflow copying iv_data from guest to
host(prepare_sym_cipher_op & prepare_sym_chain_op)
CVE: CVE-2020-14377
Severity: 7.1 (High)
CVSS scores: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Description: dpdk: write_back_data buffer over read
(cipher->para.dst_data_len & de= sc->len)
CVE: CVE-2020-14378
Severity: 3.3 (Low)
CVSS scores: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Description: dpdk: Partial Denial of Service due to Integer Underflow
Validation of the cryptodev changes was performed by the Intel validation team.
Thanks to "Ryan Hall <ryan.e.hall@intel.com>" for reporting the issues.
Please see https://bugs.dpdk.org/show_bug.cgi?id=272 for more information.
Luca Boccassi
---
VERSION | 2 +-
doc/guides/rel_notes/release_19_11.rst | 22 ++
examples/vhost_crypto/main.c | 2 +-
lib/librte_vhost/rte_vhost_crypto.h | 3 +
lib/librte_vhost/vhost_crypto.c | 452 ++++++++++++++++++---------------
5 files changed, 271 insertions(+), 210 deletions(-)
Fan Zhang (6):
vhost/crypto: fix pool allocation
vhost/crypto: fix incorrect descriptor deduction
vhost/crypto: fix missed request check for copy mode
vhost/crypto: fix incorrect write back source
vhost/crypto: fix data length check
vhost/crypto: fix possible TOCTOU attack
Luca Boccassi (1):
version: 19.11.5
reply other threads:[~2020-09-28 15:24 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20200928152208.2857501-1-luca.boccassi@gmail.com \
--to=luca.boccassi@gmail.com \
--cc=announce@dpdk.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).