DPDK announcements
 help / color / Atom feed
* [dpdk-announce] DPDK 19.11.5 released
@ 2020-09-28 15:22 luca.boccassi
  0 siblings, 0 replies; only message in thread
From: luca.boccassi @ 2020-09-28 15:22 UTC (permalink / raw)
  To: announce

Hi all,

Here is a new stable release:
	https://fast.dpdk.org/rel/dpdk-19.11.5.tar.xz

The git tree is at:
	https://dpdk.org/browse/dpdk-stable/?h=19.11

This release fixes the following security issues:

CVE: CVE-2020-14374
Severity: 8.8 (High)
CVSS scores: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description: dpdk: Remote Code Execution in vhost_crypto (VM Escape)

CVE: CVE-2020-14375
Severity: 7.8 (High)
CVSS scores: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Description: dpdk: Time-of-check time-of-use vulnerabilities throughout
vhost_crypto.c

CVE: CVE-2020-14376
Severity: 7.8 (High)
CVSS scores: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Description: dpdk: Buffer overflow copying iv_data from guest to
host(prepare_sym_cipher_op & prepare_sym_chain_op)

CVE: CVE-2020-14377
Severity: 7.1 (High)
CVSS scores: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Description: dpdk: write_back_data buffer over read
(cipher->para.dst_data_len & de= sc->len)

CVE: CVE-2020-14378
Severity: 3.3 (Low)
CVSS scores: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Description: dpdk: Partial Denial of Service due to Integer Underflow

Validation of the cryptodev changes was performed by the Intel validation team.
Thanks to "Ryan Hall <ryan.e.hall@intel.com>" for reporting the issues.
Please see https://bugs.dpdk.org/show_bug.cgi?id=272 for more information.

Luca Boccassi

---
 VERSION                                |   2 +-
 doc/guides/rel_notes/release_19_11.rst |  22 ++
 examples/vhost_crypto/main.c           |   2 +-
 lib/librte_vhost/rte_vhost_crypto.h    |   3 +
 lib/librte_vhost/vhost_crypto.c        | 452 ++++++++++++++++++---------------
 5 files changed, 271 insertions(+), 210 deletions(-)
Fan Zhang (6):
      vhost/crypto: fix pool allocation
      vhost/crypto: fix incorrect descriptor deduction
      vhost/crypto: fix missed request check for copy mode
      vhost/crypto: fix incorrect write back source
      vhost/crypto: fix data length check
      vhost/crypto: fix possible TOCTOU attack

Luca Boccassi (1):
      version: 19.11.5

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, back to index

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-09-28 15:22 [dpdk-announce] DPDK 19.11.5 released luca.boccassi

DPDK announcements

Archives are clonable:
	git clone --mirror http://inbox.dpdk.org/announce/0 announce/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 announce announce/ http://inbox.dpdk.org/announce \
		announce@dpdk.org
	public-inbox-index announce


Newsgroup available over NNTP:
	nntp://inbox.dpdk.org/inbox.dpdk.announce


AGPL code for this site: git clone https://public-inbox.org/ public-inbox