dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair()
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| [UNKNOWN] | dpdk | affected |
|
Configuration 1 [-]
|
Configuration 2 [-]
|
Configuration 3 [-]
|
Configuration 4 [-]
|
Configuration 5 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Fast Datapath for Red Hat Enterprise Linux 7 | |||
| openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el7fdp | cpe:/o:redhat:enterprise_linux:7::fastdatapath | RHSA-2020:2296 | 2020-05-26T00:00:00Z |
| openvswitch-0:2.9.0-130.el7fdp | cpe:/o:redhat:enterprise_linux:7::fastdatapath | RHSA-2020:2298 | 2020-05-26T00:00:00Z |
| Fast Datapath for Red Hat Enterprise Linux 8 | |||
| openvswitch2.13-0:2.13.0-25.el8fdp.1 | cpe:/o:redhat:enterprise_linux:8::fastdatapath | RHSA-2020:2295 | 2020-05-26T00:00:00Z |
| openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el8fdp | cpe:/o:redhat:enterprise_linux:8::fastdatapath | RHSA-2020:2297 | 2020-05-26T00:00:00Z |
| Red Hat Enterprise Linux 7 Extras | |||
| dpdk-0:18.11.8-1.el7_8 | cpe:/a:redhat:rhel_extras_other:7 | RHSA-2020:2683 | 2020-06-23T00:00:00Z |
| Red Hat Enterprise Linux 8 | |||
| dpdk-0:19.11.3-1.el8 | cpe:/a:redhat:enterprise_linux:8 | RHSA-2020:4806 | 2020-11-04T00:00:00Z |
| Red Hat OpenStack Platform 13.0 (Queens) | |||
| openvswitch2.11-0:2.11.3-77.el7fdp | cpe:/a:redhat:openstack:13::el7 | RHSA-2021:0931 | 2021-03-18T00:00:00Z |
| openvswitch-selinux-extra-policy-0:1.0-17.el7fdp | cpe:/a:redhat:openstack:13::el7 | RHSA-2021:0931 | 2021-03-18T00:00:00Z |
| ovn2.11-0:2.11.1-57.el7fdp | cpe:/a:redhat:openstack:13::el7 | RHSA-2021:0931 | 2021-03-18T00:00:00Z |
| Red Hat Virtualization 4.2 for Red Hat Enterprise Linux 7.6 EUS | |||
| openvswitch-0:2.9.0-130.el7fdp | cpe:/o:redhat:enterprise_linux:7::hypervisor | RHSA-2020:2298 | 2020-05-26T00:00:00Z |
| Red Hat Virtualization 4 for Red Hat Enterprise Linux 7 | |||
| openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el7fdp | cpe:/o:redhat:enterprise_linux:7::hypervisor | RHSA-2020:4114 | 2020-09-30T00:00:00Z |
| ovn2.11-0:2.11.1-44.el7fdp | cpe:/o:redhat:enterprise_linux:7::hypervisor | RHSA-2020:4114 | 2020-09-30T00:00:00Z |
| Red Hat Virtualization Engine 4.3 | |||
| openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el7fdp | cpe:/a:redhat:rhev_manager:4.3 | RHSA-2020:4114 | 2020-09-30T00:00:00Z |
| ovn2.11-0:2.11.1-44.el7fdp | cpe:/a:redhat:rhev_manager:4.3 | RHSA-2020:4114 | 2020-09-30T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-4688-1 | dpdk security update |
EUVD |
EUVD-2020-3150 | A memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an integer truncation on the index of a payload. Under certain circumstances, the index (a UInt) is copied and truncated into a uint16, which can lead to out of bound indexing and possible memory corruption. |
Ubuntu USN |
USN-4362-1 | DPDK vulnerabilities |
No CVSS v4.0
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.378% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.