CVE-2020-10722

Katalog CVE

CVSS 6.7 · Medium EPSS 0,38%

Kerentanan Integer Overflow or Wraparound pada dpdk data plane development kit, canonical ubuntu linux +4 lainnya. Skor CVSS 3.1 6.7 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.

Rincian

Terbit di NVD

19 Mei 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

0,38% peluang dieksploitasi; lebih tinggi dari 29,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugs.dpdk.org/show_bug.cgi?id=267 issue tracking · patch · advisory vendor
• https://www.oracle.com/security-alerts/cpujan2021.html patch · advisory pihak ketiga
• https://www.oracle.com/security-alerts/cpuoct2020.html patch · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00045.html mailing list · advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10722 issue tracking · advisory pihak ketiga
• https://usn.ubuntu.com/4362-1/ advisory pihak ketiga
• https://www.openwall.com/lists/oss-security/2020/05/18/2 mailing list · advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRHKFVV4MRWNN...