Summary
It was discovered that DPDK incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a crash or
execute arbitrary code. (CVE-2020-10722, CVE-2020-10723,
CVE-2020-10724, CVE-2020-10725, CVE-2020-10726)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | dpdk | 17.11.9-0ubuntu18.04.2 |
| Ubuntu · 20.04 LTS 20.04:LTS | dpdk | 19.11.1-0ubuntu1.1 |
Vulnerabilities 5
-
High 7.7
A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vho…
-
Medium 6.0
A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct access to the vhost-u…
-
Medium 5.1
A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_l…
-
Medium 5.1
A memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an integer truncation on t…
-
Medium 5.1
A vulnerability was found in DPDK versions 18.11 and above. The vhost-crypto library code is missing validations for us…