CVE-2020-14376
Severity
7.8HIGH
EPSS
0.1%
top 75.15%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedSep 30
Latest updateMay 24
Description
A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A lack of bounds checking when copying iv_data from the VM guest memory into host memory can lead to a large buffer overflow. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:HExploitability: 1.1 | Impact: 6.0
Affected Packages4 packages
Also affects: Ubuntu Linux 20.04
Patches
🔴Vulnerability Details
3📋Vendor Advisories
4Red Hat▶
dpdk: buffer overflow copying iv_data from guest to host (prepare_sym_cipher_op & prepare_sym_chain_op)↗2020-09-28
Microsoft▶
A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A lack of bounds checking when copying iv_data from the VM guest memory into host memory can lead to a large buffer overflow. T↗2020-09-08
Debian▶
CVE-2020-14376: dpdk - A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A lack ...↗2020