CVE-2020-14376

Katalog CVE

CVSS 7.8 · High EPSS 0,40%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada dpdk data plane development kit, canonical ubuntu linux +1 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A lack of bounds checking when copying iv_data from the VM guest memory into host memory can lead to a large buffer overflow. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Rincian

Terbit di NVD

30 September 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

0,40% peluang dieksploitasi; lebih tinggi dari 31,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.openwall.com/lists/oss-security/2020/09/28/3 mailing list · patch · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00004.html advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00006.html advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/01/04/1 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/01/04/2 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/01/04/5 mailing list · advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=1879470 issue tracking · advisory pihak ketiga
• https://usn.ubuntu.com/4550-1/ advisory pihak ketiga