CVE-2020-14374

Katalog CVE

CVSS 8.8 · High EPSS 0,43%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada dpdk data plane development kit, canonical ubuntu linux +1 lainnya. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A flawed bounds checking in the copy_data function leads to a buffer overflow allowing an attacker in a virtual machine to write arbitrary data to any address in the vhost_crypto application. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Rincian

Terbit di NVD

30 September 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

0,43% peluang dieksploitasi; lebih tinggi dari 35,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.openwall.com/lists/oss-security/2021/01/04/1 mailing list · patch · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/01/04/2 mailing list · patch · advisory pihak ketiga
• https://www.openwall.com/lists/oss-security/2020/09/28/3 mailing list · patch · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00004.html advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00006.html mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/01/04/5 mailing list · advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=1879466 issue tracking · tool signature