A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A flawed bounds checking in the copy_data function leads to a buffer overflow allowing an attacker in a virtual machine to write arbitrary data to any address in the vhost_crypto application. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade dpdk | Jul 30, 2024 | Sep 30, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade dpdkUpgrade dpdk-devel | Feb 3, 2021 | Sep 30, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade dpdk-develUpgrade dpdkUpgrade dpdk-tools | Nov 3, 2020 | Sep 30, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade dpdkUpgrade dpdk-tools | Nov 3, 2020 | Sep 30, 2020 |
| Suse | — | Upgrade dpdk-docUpgrade dpdk-toolsUpgrade dpdk-thunderx-develUpgrade libdpdk-20_0Upgrade dpdk-thunderx-kmp-defaultUpgrade dpdk-kmp-preemptUpgrade libdpdk-18_11Upgrade dpdkUpgrade dpdk-thunderxUpgrade dpdk-develUpgrade dpdk-kmp-defaultUpgrade dpdk-examples | Sep 29, 2020 | Sep 28, 2020 |
| Ubuntu | — | Upgrade dpdk | Sep 29, 2020 | Sep 28, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub