CVE-2020-14374
Summary
| CVE | CVE-2020-14374 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2020-09-30 20:15:00 UTC |
|---|
| Updated | 2022-10-29 02:39:00 UTC |
|---|
| Description | A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A flawed bounds checking in the copy_data function leads to a buffer overflow allowing an attacker in a virtual machine to write arbitrary data to any address in the vhost_crypto application. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| oss-security - Re: [dpdk-dev] DPDK security advisory for multiple
vhost crypto issues |
MLIST |
www.openwall.com |
|
| [security-announce] openSUSE-SU-2020:1599-1: critical: Security update f |
SUSE |
lists.opensuse.org |
Third Party Advisory |
| oss-security - Re: [dpdk-dev] DPDK security advisory for multiple
vhost crypto issues |
MLIST |
www.openwall.com |
|
| [security-announce] openSUSE-SU-2020:1593-1: critical: Security update f |
SUSE |
lists.opensuse.org |
Third Party Advisory |
| 1879466 – (CVE-2020-14374) CVE-2020-14374 dpdk: remote Code Execution in vhost_crypto (VM Escape) |
MISC |
bugzilla.redhat.com |
Issue Tracking, Tool Signature |
| oss-security - Re: DPDK security advisory for multiple vhost crypto issues |
MLIST |
www.openwall.com |
|
| oss-security - DPDK security advisory for multiple vhost crypto issues |
MISC |
www.openwall.com |
Mailing List, Patch, Third Party Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 670909 EulerOS Security Update for dpdk (EulerOS-SA-2021-1241)
