CVE-2020-10724
Fixed in a distro release EPSS <1%CVSS 5.1
A vulnerability was found in DPDK versions 18.11 and above. The vhost-crypto library code is missing validations for user-supplied values, potentially allowing an information leak through an out-of-bounds memory read.
Products: dpdk data_plane_development_kit, canonical ubuntu_linux, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | dpdk | 19.11.2-1 |
| Debian 13 | dpdk | 19.11.2-1 |
| Debian 14 | dpdk | 19.11.2-1 |
| Red Hat Enterprise Linux 7 | openvswitch2.11 | 0:2.11.0-54.20200327gita4efc59.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.11-debuginfo | 0:2.11.0-54.20200327gita4efc59.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.11-devel | 0:2.11.0-54.20200327gita4efc59.el7fdp |
| Red Hat Enterprise Linux 7 | openvswitch2.11-test | 0:2.11.0-54.20200327gita4efc59.el7fdp |
| Red Hat Enterprise Linux 7 | python-openvswitch2.11 | 0:2.11.0-54.20200327gita4efc59.el7fdp |
| Red Hat Enterprise Linux 8 | network-scripts-openvswitch2.11 | 0:2.11.0-54.20200327gita4efc59.el8fdp |
| Red Hat Enterprise Linux 8 | network-scripts-openvswitch2.13 | 0:2.13.0-25.el8fdp.1 |
| Red Hat Enterprise Linux 8 | openvswitch2.11 | 0:2.11.0-54.20200327gita4efc59.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.11-debuginfo | 0:2.11.0-54.20200327gita4efc59.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.11-debugsource | 0:2.11.0-54.20200327gita4efc59.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.11-devel | 0:2.11.0-54.20200327gita4efc59.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.11-test | 0:2.11.0-54.20200327gita4efc59.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.13 | 0:2.13.0-25.el8fdp.1 |
| Red Hat Enterprise Linux 8 | openvswitch2.13-debuginfo | 0:2.13.0-25.el8fdp.1 |
| Red Hat Enterprise Linux 8 | openvswitch2.13-debugsource | 0:2.13.0-25.el8fdp.1 |
| Red Hat Enterprise Linux 8 | openvswitch2.13-devel | 0:2.13.0-25.el8fdp.1 |
| Red Hat Enterprise Linux 8 | openvswitch2.13-test | 0:2.13.0-25.el8fdp.1 |
| Red Hat Enterprise Linux 8 | python3-openvswitch2.11 | 0:2.11.0-54.20200327gita4efc59.el8fdp |
| Red Hat Enterprise Linux 8 | python3-openvswitch2.11-debuginfo | 0:2.11.0-54.20200327gita4efc59.el8fdp |
| Red Hat Enterprise Linux 8 | python3-openvswitch2.13 | 0:2.13.0-25.el8fdp.1 |
| Red Hat Enterprise Linux 8 | python3-openvswitch2.13-debuginfo | 0:2.13.0-25.el8fdp.1 |
| Red Hat openstack 13 | openvswitch-selinux-extra-policy | 0:1.0-17.el7fdp |
| Red Hat openstack 13 | openvswitch2.11 | 0:2.11.3-77.el7fdp |
| Red Hat openstack 13 | openvswitch2.11-debuginfo | 0:2.11.3-77.el7fdp |
| Red Hat openstack 13 | openvswitch2.11-devel | 0:2.11.3-77.el7fdp |
| Red Hat openstack 13 | openvswitch2.11-test | 0:2.11.3-77.el7fdp |
| Red Hat openstack 13 | ovn2.11 | 0:2.11.1-57.el7fdp |
| Red Hat openstack 13 | ovn2.11-central | 0:2.11.1-57.el7fdp |
| Red Hat openstack 13 | ovn2.11-debuginfo | 0:2.11.1-57.el7fdp |
| Red Hat openstack 13 | ovn2.11-host | 0:2.11.1-57.el7fdp |
| Red Hat openstack 13 | ovn2.11-vtep | 0:2.11.1-57.el7fdp |
| Red Hat openstack 13 | python-openvswitch2.11 | 0:2.11.3-77.el7fdp |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | dpdk | 18.11.3-3.19.2 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | dpdk-thunderx | 18.11.3-3.19.2 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | dpdk | 18.11.3-3.19.2 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | dpdk-thunderx | 18.11.3-3.19.2 |
| SUSE Linux Enterprise Module for Server Applications 15 SP1 | dpdk | 18.11.3-4.6.2 |
| SUSE Linux Enterprise Server 12 SP5 | dpdk | 18.11.3-3.9.2 |
| SUSE Linux Enterprise Server 12 SP5 | dpdk-thunderx | 18.11.3-3.9.2 |
| SUSE Linux Enterprise Server 15-LTSS | dpdk | 18.11.3-3.19.2 |
| SUSE Linux Enterprise Server 15-LTSS | dpdk-thunderx | 18.11.3-3.19.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | dpdk | 18.11.3-3.9.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | dpdk-thunderx | 18.11.3-3.9.2 |
| SUSE Linux Enterprise Server for SAP Applications 15 | dpdk | 18.11.3-3.19.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | dpdk | 18.11.3-3.9.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | dpdk-thunderx | 18.11.3-3.9.2 |
| Ubuntu 18.04 LTS | dpdk | 17.11.9-0ubuntu18.04.2 |
| Ubuntu 20.04 LTS | dpdk | 19.11.1-0ubuntu1.1 |
| openSUSE Leap 15.1 | dpdk | 18.11.3-lp151.3.4.1 |