CVE-2020-10725highCWE-665

CVE-2020-10725: falha de alta gravidade em [UNKNOWN] dpdk

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar dpdk

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.7epss 2.2%
A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vhost-user backend application running on the host, which could result in a loss of connectivity for the other guests running on that host. This is caused by a missing validity check of the descriptor address in the function `virtio_dev_rx_batch_packed()`.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Produtos afetados
[UNKNOWN] · dpdk
CVEs relacionadas — [UNKNOWN] dpdk

No mesmo produto, das mais perigosas para as menos.

CVE-2020-10726MEDIUMCVE-2020-10726EPSS 0.5%CVE-2020-10722MEDIUMCVE-2020-10722EPSS 0.4%CVE-2020-10723MEDIUMCVE-2020-10723EPSS 0.4%CVE-2020-10724MEDIUMCVE-2020-10724EPSS 0.4%