CVE-2020-10722
Fixed in a distro release EPSS <1%CVSS 5.1
A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.
Products: dpdk data_plane_development_kit, canonical ubuntu_linux, fedoraproject fedora, opensuse leap, oracle communications_session_border_controller, oracle enterprise_communications_broker
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 10 | dpdk | 18.11.6-1~deb10u2 |
| Debian 12 | dpdk | 19.11.2-1 |
| Debian 13 | dpdk | 19.11.2-1 |
| Debian 14 | dpdk | 19.11.2-1 |
| Debian 9 | dpdk | 16.11.11-1+deb9u2 |
| Red Hat Enterprise Linux 7 | openvswitch | 0:2.9.0-130.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-debuginfo | 0:2.9.0-130.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-devel | 0:2.9.0-130.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-ovn-central | 0:2.9.0-130.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-ovn-common | 0:2.9.0-130.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-ovn-host | 0:2.9.0-130.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-ovn-vtep | 0:2.9.0-130.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch-test | 0:2.9.0-130.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.11 | 0:2.11.0-54.20200327gita4efc59.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.11-debuginfo | 0:2.11.0-54.20200327gita4efc59.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.11-devel | 0:2.11.0-54.20200327gita4efc59.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.11-test | 0:2.11.0-54.20200327gita4efc59.el7fdp |
| Red Hat Enterprise Linux 7 | ovn2.11 | 0:2.11.1-44.el7fdp |
| Red Hat Enterprise Linux 7 | ovn2.11-debuginfo | 0:2.11.1-44.el7fdp |
| Red Hat Enterprise Linux 7 | ovn2.11-host | 0:2.11.1-44.el7fdp |
| Red Hat Enterprise Linux 7 | ovn2.11-vtep | 0:2.11.1-44.el7fdp |
| Red Hat Enterprise Linux 7 | python-openvswitch | 0:2.9.0-130.el7fdp |
| Red Hat Enterprise Linux 7 | python-openvswitch2.11 | 0:2.11.0-54.20200327gita4efc59.el7fdp |
| Red Hat Enterprise Linux 8 | dpdk | 0:19.11.3-1.el8 |
| Red Hat Enterprise Linux 8 | dpdk-debuginfo | 0:19.11.3-1.el8 |
| Red Hat Enterprise Linux 8 | dpdk-debugsource | 0:19.11.3-1.el8 |
| Red Hat Enterprise Linux 8 | dpdk-devel | 0:19.11.3-1.el8 |
| Red Hat Enterprise Linux 8 | dpdk-devel-debuginfo | 0:19.11.3-1.el8 |
| Red Hat Enterprise Linux 8 | dpdk-doc | 0:19.11.3-1.el8 |
| Red Hat Enterprise Linux 8 | dpdk-tools | 0:19.11.3-1.el8 |
| Red Hat Enterprise Linux 8 | network-scripts-openvswitch2.11 | 0:2.11.0-54.20200327gita4efc59.el8fdp |
| Red Hat Enterprise Linux 8 | network-scripts-openvswitch2.13 | 0:2.13.0-25.el8fdp.1 |
| Red Hat Enterprise Linux 8 | openvswitch2.11 | 0:2.11.0-54.20200327gita4efc59.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.11-debuginfo | 0:2.11.0-54.20200327gita4efc59.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.11-debugsource | 0:2.11.0-54.20200327gita4efc59.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.11-devel | 0:2.11.0-54.20200327gita4efc59.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.11-test | 0:2.11.0-54.20200327gita4efc59.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.13 | 0:2.13.0-25.el8fdp.1 |
| Red Hat Enterprise Linux 8 | openvswitch2.13-debuginfo | 0:2.13.0-25.el8fdp.1 |
| Red Hat Enterprise Linux 8 | openvswitch2.13-debugsource | 0:2.13.0-25.el8fdp.1 |
| Red Hat Enterprise Linux 8 | openvswitch2.13-devel | 0:2.13.0-25.el8fdp.1 |
| Red Hat Enterprise Linux 8 | openvswitch2.13-test | 0:2.13.0-25.el8fdp.1 |
| Red Hat Enterprise Linux 8 | python3-openvswitch2.11 | 0:2.11.0-54.20200327gita4efc59.el8fdp |
| Red Hat Enterprise Linux 8 | python3-openvswitch2.11-debuginfo | 0:2.11.0-54.20200327gita4efc59.el8fdp |
| Red Hat Enterprise Linux 8 | python3-openvswitch2.13 | 0:2.13.0-25.el8fdp.1 |
| Red Hat Enterprise Linux 8 | python3-openvswitch2.13-debuginfo | 0:2.13.0-25.el8fdp.1 |
| Red Hat openstack 13 | openvswitch-selinux-extra-policy | 0:1.0-17.el7fdp |
| Red Hat openstack 13 | openvswitch2.11 | 0:2.11.3-77.el7fdp |
| Red Hat openstack 13 | openvswitch2.11-debuginfo | 0:2.11.3-77.el7fdp |
| Red Hat openstack 13 | openvswitch2.11-devel | 0:2.11.3-77.el7fdp |
| Red Hat openstack 13 | openvswitch2.11-test | 0:2.11.3-77.el7fdp |
| Red Hat openstack 13 | ovn2.11 | 0:2.11.1-57.el7fdp |
| Red Hat openstack 13 | ovn2.11-central | 0:2.11.1-57.el7fdp |
| Red Hat openstack 13 | ovn2.11-debuginfo | 0:2.11.1-57.el7fdp |
| Red Hat openstack 13 | ovn2.11-host | 0:2.11.1-57.el7fdp |
| Red Hat openstack 13 | ovn2.11-vtep | 0:2.11.1-57.el7fdp |
| Red Hat openstack 13 | python-openvswitch2.11 | 0:2.11.3-77.el7fdp |
| Red Hat rhel extras other 7 | dpdk | 0:18.11.8-1.el7_8 |
| Red Hat rhel extras other 7 | dpdk-debuginfo | 0:18.11.8-1.el7_8 |
| Red Hat rhel extras other 7 | dpdk-devel | 0:18.11.8-1.el7_8 |
| Red Hat rhel extras other 7 | dpdk-doc | 0:18.11.8-1.el7_8 |
| Red Hat rhel extras other 7 | dpdk-tools | 0:18.11.8-1.el7_8 |
| Red Hat rhev manager 4.3 | openvswitch2.11 | 0:2.11.0-54.20200327gita4efc59.el7fdp |
| Red Hat rhev manager 4.3 | openvswitch2.11-debuginfo | 0:2.11.0-54.20200327gita4efc59.el7fdp |
| Red Hat rhev manager 4.3 | openvswitch2.11-devel | 0:2.11.0-54.20200327gita4efc59.el7fdp |
| Red Hat rhev manager 4.3 | ovn2.11 | 0:2.11.1-44.el7fdp |
| Red Hat rhev manager 4.3 | ovn2.11-central | 0:2.11.1-44.el7fdp |
| Red Hat rhev manager 4.3 | ovn2.11-debuginfo | 0:2.11.1-44.el7fdp |
| Red Hat rhev manager 4.3 | ovn2.11-vtep | 0:2.11.1-44.el7fdp |
| Red Hat rhev manager 4.3 | python-openvswitch2.11 | 0:2.11.0-54.20200327gita4efc59.el7fdp |
| SUSE Enterprise Storage 5 | dpdk | 16.11.9-8.15.13 |
| SUSE Enterprise Storage 5 | dpdk-thunderx | 16.11.9-8.15.10 |
| SUSE HPE Helion OpenStack 8 | dpdk | 16.11.9-8.15.13 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | dpdk | 18.11.3-3.19.2 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | dpdk-thunderx | 18.11.3-3.19.2 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | dpdk | 18.11.3-3.19.2 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | dpdk-thunderx | 18.11.3-3.19.2 |
| SUSE Linux Enterprise Module for Server Applications 15 SP1 | dpdk | 18.11.3-4.6.2 |
| SUSE Linux Enterprise Server 12 SP3-BCL | dpdk | 16.11.9-8.15.13 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | dpdk | 16.11.9-8.15.13 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | dpdk-thunderx | 16.11.9-8.15.10 |
| SUSE Linux Enterprise Server 12 SP4 | dpdk | 17.11.7-5.6.2 |
| SUSE Linux Enterprise Server 12 SP4 | dpdk-thunderx | 17.11.7-5.6.2 |
| SUSE Linux Enterprise Server 12 SP5 | dpdk | 18.11.3-3.9.2 |
| SUSE Linux Enterprise Server 12 SP5 | dpdk-thunderx | 18.11.3-3.9.2 |
| SUSE Linux Enterprise Server 15-LTSS | dpdk | 18.11.3-3.19.2 |
| SUSE Linux Enterprise Server 15-LTSS | dpdk-thunderx | 18.11.3-3.19.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | dpdk | 16.11.9-8.15.13 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | dpdk | 17.11.7-5.6.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | dpdk-thunderx | 17.11.7-5.6.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | dpdk | 18.11.3-3.9.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | dpdk-thunderx | 18.11.3-3.9.2 |
| SUSE Linux Enterprise Server for SAP Applications 15 | dpdk | 18.11.3-3.19.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | dpdk | 17.11.7-5.6.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | dpdk-thunderx | 17.11.7-5.6.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | dpdk | 18.11.3-3.9.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | dpdk-thunderx | 18.11.3-3.9.2 |
| SUSE OpenStack Cloud 8 | dpdk | 16.11.9-8.15.13 |
| SUSE OpenStack Cloud Crowbar 8 | dpdk | 16.11.9-8.15.13 |
| Ubuntu 18.04 LTS | dpdk | 17.11.9-0ubuntu18.04.2 |
| Ubuntu 20.04 LTS | dpdk | 19.11.1-0ubuntu1.1 |
| openSUSE Leap 15.1 | dpdk | 18.11.3-lp151.3.4.1 |
| openSUSE Tumbleweed | dpdk | 19.11.8-2.7 |