CVE-2020-10723: falha de média gravidade em [UNKNOWN] dpdk
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.1epss 0.4%
A memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an integer truncation on the index of a payload. Under certain circumstances, the index (a UInt) is copied and truncated into a uint16, which can lead to out of bound indexing and possible memory corruption.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
Produtos afetados
[UNKNOWN] · dpdkCVEs relacionadas — [UNKNOWN] dpdk
No mesmo produto, das mais perigosas para as menos.
Referências
http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00045.htmlhttps://bugs.dpdk.org/show_bug.cgi?id=268https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10723https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRHKFVV4MRWNNJOYQOVP64L4UVWYPEO4/https://usn.ubuntu.com/4362-1/https://www.openwall.com/lists/oss-security/2020/05/18/2https://www.oracle.com/security-alerts/cpujan2021.htmlhttps://www.oracle.com/security-alerts/cpuoct2020.html