vulnerability

SUSE: CVE-2020-10726: SUSE Linux Security Advisory

Severity
2
CVSS
(AV:L/AC:L/Au:N/C:N/I:N/A:P)
Published
May 18, 2020
Added
May 20, 2020
Modified
Feb 4, 2022

Description

A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct access to the vhost-user socket can keep sending VHOST_USER_GET_INFLIGHT_FD messages, causing a resource leak (file descriptors and virtual memory), which may result in a denial of service.

Solutions

suse-upgrade-dpdksuse-upgrade-dpdk-develsuse-upgrade-dpdk-docsuse-upgrade-dpdk-examplessuse-upgrade-dpdk-kmp-defaultsuse-upgrade-dpdk-thunderxsuse-upgrade-dpdk-thunderx-develsuse-upgrade-dpdk-thunderx-kmp-defaultsuse-upgrade-dpdk-toolssuse-upgrade-libdpdk-18_11suse-upgrade-libdpdk-20_0
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.