CVE-2020-14378

Katalog CVE

CVSS 3.3 · Low EPSS 0,40%

Kerentanan Integer Underflow (Wrap or Wraparound) pada dpdk data plane development kit, canonical ubuntu linux +1 lainnya. Skor CVSS 3.1 3.3 (Low) menurut NVD.

Deskripsi (NVD)

An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc` function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause `move_desc` to get stuck in a 4,294,967,295-count iteration loop. Depending on how `vhost_crypto` is being used this could prevent other VMs or network tasks from being serviced by the busy DPDK lcore for an extended period.

Rincian

Terbit di NVD

30 September 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.3 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-191: Integer Underflow (Wrap or Wraparound)

EPSS (30 hari)

0,40% peluang dieksploitasi; lebih tinggi dari 32,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.openwall.com/lists/oss-security/2020/09/28/3 mailing list · patch · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00004.html mailing list · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00006.html mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/01/04/1 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/01/04/2 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/01/04/5 mailing list · advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=1879473 issue tracking · advisory pihak ketiga
• https://usn.ubuntu.com/4550-1/ advisory pihak ketiga