CVE-2020-10725
Fixed in a distro release EPSS 2%CVSS 7.7
A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vhost-user backend application running on the host, which could result in a loss of connectivity for the other guests running on that host. This is caused by a missing validity check of the descriptor address in the function `virtio_dev_rx_batch_packed()`.
Products: dpdk data_plane_development_kit, fedoraproject fedora, opensuse leap, oracle enterprise_communications_broker
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | dpdk | 19.11.2-1 |
| Debian 13 | dpdk | 19.11.2-1 |
| Debian 14 | dpdk | 19.11.2-1 |
| Red Hat Enterprise Linux 8 | dpdk | 0:19.11.3-1.el8 |
| Red Hat Enterprise Linux 8 | dpdk-debuginfo | 0:19.11.3-1.el8 |
| Red Hat Enterprise Linux 8 | dpdk-debugsource | 0:19.11.3-1.el8 |
| Red Hat Enterprise Linux 8 | dpdk-devel | 0:19.11.3-1.el8 |
| Red Hat Enterprise Linux 8 | dpdk-devel-debuginfo | 0:19.11.3-1.el8 |
| Red Hat Enterprise Linux 8 | dpdk-doc | 0:19.11.3-1.el8 |
| Red Hat Enterprise Linux 8 | dpdk-tools | 0:19.11.3-1.el8 |
| Red Hat Enterprise Linux 8 | network-scripts-openvswitch2.13 | 0:2.13.0-25.el8fdp.1 |
| Red Hat Enterprise Linux 8 | openvswitch2.13 | 0:2.13.0-25.el8fdp.1 |
| Red Hat Enterprise Linux 8 | openvswitch2.13-debuginfo | 0:2.13.0-25.el8fdp.1 |
| Red Hat Enterprise Linux 8 | openvswitch2.13-debugsource | 0:2.13.0-25.el8fdp.1 |
| Red Hat Enterprise Linux 8 | openvswitch2.13-devel | 0:2.13.0-25.el8fdp.1 |
| Red Hat Enterprise Linux 8 | openvswitch2.13-test | 0:2.13.0-25.el8fdp.1 |
| Red Hat Enterprise Linux 8 | python3-openvswitch2.13 | 0:2.13.0-25.el8fdp.1 |
| Red Hat Enterprise Linux 8 | python3-openvswitch2.13-debuginfo | 0:2.13.0-25.el8fdp.1 |
| Red Hat rhel eus 8.2 | dpdk | 0:19.11-5.el8_2 |
| Red Hat rhel eus 8.2 | dpdk-debuginfo | 0:19.11-5.el8_2 |
| Red Hat rhel eus 8.2 | dpdk-debugsource | 0:19.11-5.el8_2 |
| Red Hat rhel eus 8.2 | dpdk-devel | 0:19.11-5.el8_2 |
| Red Hat rhel eus 8.2 | dpdk-devel-debuginfo | 0:19.11-5.el8_2 |
| Red Hat rhel eus 8.2 | dpdk-doc | 0:19.11-5.el8_2 |
| Red Hat rhel eus 8.2 | dpdk-tools | 0:19.11-5.el8_2 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | dpdk | 18.11.3-3.19.2 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | dpdk-thunderx | 18.11.3-3.19.2 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | dpdk | 18.11.3-3.19.2 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | dpdk-thunderx | 18.11.3-3.19.2 |
| SUSE Linux Enterprise Module for Server Applications 15 SP1 | dpdk | 18.11.3-4.6.2 |
| SUSE Linux Enterprise Server 15-LTSS | dpdk | 18.11.3-3.19.2 |
| SUSE Linux Enterprise Server 15-LTSS | dpdk-thunderx | 18.11.3-3.19.2 |
| SUSE Linux Enterprise Server for SAP Applications 15 | dpdk | 18.11.3-3.19.2 |
| Ubuntu 18.04 LTS | dpdk | 17.11.9-0ubuntu18.04.2 |
| Ubuntu 20.04 LTS | dpdk | 19.11.1-0ubuntu1.1 |
| openSUSE Leap 15.1 | dpdk | 18.11.3-lp151.3.4.1 |
| openSUSE Tumbleweed | dpdk | 19.11.8-2.7 |