CVE-2020-10724

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2020-05/msg00045.html · Broken Link
• bugs.dpdk.org/show_bug.cgi · Issue Tracking
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRHKFVV4MRWNNJOYQOVP64L4UVWYPEO4
• usn.ubuntu.com/4362-1 · Third Party Advisory
• openwall.com/lists/oss-security/2020/05/18/2 · Mailing List
• oracle.com/security-alerts/cpujan2021.html · Third Party Advisory
• oracle.com/security-alerts/cpuoct2020.html · Third Party Advisory

data plane development kit のその他の脆弱性

• CVE-2022-2132高 8.6A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by se…
• CVE-2022-0669中 6.5A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected number of fds as ancillary data to VHOST_US…
• CVE-2021-3839高 7.5A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inflight.num_queues`, p…
• CVE-2020-14374高 8.8A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A flawed bounds checking in the copy_data function leads to a buffe…
• CVE-2020-14378低 3.3An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc` function can lead to large amounts of CPU cycles…