CVE-2020-10723

dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair()

Published May 19, 2020 CVSS 3.1 · 5.1 Medium EPSS < 1% KEV · Not listed
Description
A memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an integer truncation on the index of a payload. Under certain circumstances, the index (a UInt) is copied and truncated into a uint16, which can lead to out of bound indexing and possible memory corruption.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-4688-1 dpdk security update
EUVD EUVD EUVD-2020-3150 A memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an integer truncation on the index of a payload. Under certain circumstances, the index (a UInt) is copied and truncated into a uint16, which can lead to out of bound indexing and possible memory corruption.
Ubuntu USN Ubuntu USN USN-4362-1 DPDK vulnerabilities
History

No history.