CVE-2019-14818

A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhost_user socket, can send specially crafted VRING_SET_NUM messages, resulting in a memory leak including file descriptors. This flaw could lead to a denial of service condition.

A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhost_user socket, can send specially crafted VRING_SET_NUM messages, resulting in a memory leak including file descriptors. This flaw could lead to a denial of service condition.

These are all security issues fixed in the dpdk-19.11.8-2.7 package on the GA media of openSUSE Tumbleweed.

This update for dpdk to version 17.11.7 fixes the following issues:

• CVE-2019-14818: Fixed a memory leak vulnerability caused by a malicious container may lead to to denial of service (bsc#1156146).

This update of dpdk to version 18.11.3 provides the following fixes:

dpdk was updated to 18.11.3 (fate#327817, bsc#1145713, jsc#ECO-274, fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jsc#SLE-4715)

Security issue fixed:

• CVE-2019-14818: Fixed a memory leak vulnerability caused by a malicius container may lead to to denial of service (bsc#1156146).

Other issues addressed:

• Fixed a regression by inserting version numbers to the drivers (bsc#1157179).
• Changed to multibuild (bsc#1151455).
• Added support for using externally allocated memory in DPDK.
• Added check for ensuring allocated memory is addressable by devices.
• Updated the C11 memory model version of the ring library.
• Added NXP CAAM JR PMD.
• Added support for GEN3 devices to Intel QAT driver.
• Added Distributed Software Eventdev PMD.
• Updated KNI kernel module, rte_kni library, and KNI sample application.
• Add a new sample application for vDPA.
• Updated mlx5 driver.
  • Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  • Reworked flow engine to supported e-switch flow rules (transfer attribute).
  • Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  • Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  • Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  • Added support for meson build.
  • Fixed build issue with PPC.
  • Added support for BlueField VF.
  • Added support for externally allocated static memory for DMA.

This update for dpdk to version 18.11.3 fixes the following issues:

dpdk was updated to 18.11.3

Security issue fixed:

• CVE-2019-14818: Fixed a memory leak vulnerability caused by a malicious container may lead to to denial of service (bsc#1156146).

Other issues addressed:

• Changed to multibuild (bsc#1151455).
• Fixed a regression caused by loading old version drivers (bsc#1157179).

This update for dpdk to version 18.11.3 fixes the following issues:

Security issue fixed:

• CVE-2019-14818: Fixed a denial of service by a malicious container via the vhost-user socket (bsc#1156146).

Non-security issue fixed:

• Added current version to the PMD driver directory to avoid loading previous version drivers (bsc#1157179).

This update for dpdk to 17.11.7 fixes the following issues:

Security issues fixed:

• CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171477 bsc#1171930).
• CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171477).

This update for dpdk to version 16.11.9 following issue:

• CVE-2019-14818: Fixed a memory leak vulnerability caused by a malicious container may lead to to denial of service (bsc#1156146).

• CVE-2020-12693: Fixed an authentication bypass via an alternate path or channel (boo#1172004).

• rebuilt with new signing key. (bsc#1174543)

Jason Wang discovered that DPDK incorrectly handled certain messages. An attacker in a malicious container could possibly use this issue to cause DPDK to leak resources, resulting in a denial of service.