CVE-2020-14376

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2020-10/msg00004.html · Third Party Advisory
• lists.opensuse.org/opensuse-security-announce/2020-10/msg00006.html · Third Party Advisory
• openwall.com/lists/oss-security/2021/01/04/1 · Mailing List
• openwall.com/lists/oss-security/2021/01/04/2 · Mailing List
• openwall.com/lists/oss-security/2021/01/04/5 · Mailing List
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• usn.ubuntu.com/4550-1 · Third Party Advisory
• openwall.com/lists/oss-security/2020/09/28/3 · Mailing List

data plane development kit のその他の脆弱性

• CVE-2022-2132高 8.6A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by se…
• CVE-2022-0669中 6.5A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected number of fds as ancillary data to VHOST_US…
• CVE-2021-3839高 7.5A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inflight.num_queues`, p…
• CVE-2020-14374高 8.8A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A flawed bounds checking in the copy_data function leads to a buffe…
• CVE-2020-14378低 3.3An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc` function can lead to large amounts of CPU cycles…