CVE-2020-10723

Katalog CVE

CVSS 6.7 · Medium EPSS 0,38%

Kerentanan Integer Overflow or Wraparound pada dpdk data plane development kit, canonical ubuntu linux +4 lainnya. Skor CVSS 3.1 6.7 (Medium) menurut NVD.

Deskripsi (NVD)

A memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an integer truncation on the index of a payload. Under certain circumstances, the index (a UInt) is copied and truncated into a uint16, which can lead to out of bound indexing and possible memory corruption.

Rincian

Terbit di NVD

19 Mei 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

0,38% peluang dieksploitasi; lebih tinggi dari 29,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugs.dpdk.org/show_bug.cgi?id=268 issue tracking · patch · advisory vendor
• https://www.oracle.com/security-alerts/cpujan2021.html patch · advisory pihak ketiga
• https://www.oracle.com/security-alerts/cpuoct2020.html patch · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00045.html mailing list · advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10723 issue tracking · advisory pihak ketiga
• https://usn.ubuntu.com/4362-1/ advisory pihak ketiga
• https://www.openwall.com/lists/oss-security/2020/05/18/2 mailing list · advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRHKFVV4MRWNN...