CVE-2020-14377

Katalog CVE

CVSS 7.1 · High EPSS 0,41%

Kerentanan Out-of-bounds Read pada dpdk data plane development kit, canonical ubuntu linux +1 lainnya. Skor CVSS 3.1 7.1 (High) menurut NVD.

Deskripsi (NVD)

A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A complete lack of validation of attacker-controlled parameters can lead to a buffer over read. The results of the over read are then written back to the guest virtual machine memory. This vulnerability can be used by an attacker in a virtual machine to read significant amounts of host memory. The highest threat from this vulnerability is to data confidentiality and system availability.

Rincian

Terbit di NVD

30 September 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.1 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read

EPSS (30 hari)

0,41% peluang dieksploitasi; lebih tinggi dari 33,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.openwall.com/lists/oss-security/2020/09/28/3 mailing list · patch · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00004.html advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00006.html advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/01/04/1 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/01/04/2 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/01/04/5 mailing list · advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=1879472 issue tracking · advisory pihak ketiga
• https://usn.ubuntu.com/4550-1/ advisory pihak ketiga