CVE-2020-14377
Fixed in a distro release EPSS <1%
A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A complete lack of validation of attacker-controlled parameters can lead to a buffer over read. The results of the over read are then written back to the guest virtual machine memory. This vulnerability can be used by an attacker in a virtual machine to read significant amounts of host memory. The highest threat from this vulnerability is to data confidentiality and system availability.
Products: dpdk data_plane_development_kit, canonical ubuntu_linux, opensuse leap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | dpdk | 19.11.5-1 |
| Debian 13 | dpdk | 19.11.5-1 |
| Debian 14 | dpdk | 19.11.5-1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | dpdk | 18.11.9-3.25.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | dpdk-thunderx | 18.11.9-3.25.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | dpdk | 18.11.9-3.25.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | dpdk-thunderx | 18.11.9-3.25.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP2 | dpdk | 19.11.4-3.9.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP1 | dpdk | 18.11.9-4.12.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP2 | dpdk | 19.11.4-3.9.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP2 | dpdk-thunderx | 19.11.4-3.9.1 |
| SUSE Linux Enterprise Server 12 SP5 | dpdk | 18.11.9-3.15.1 |
| SUSE Linux Enterprise Server 12 SP5 | dpdk-thunderx | 18.11.9-3.15.1 |
| SUSE Linux Enterprise Server 15-LTSS | dpdk | 18.11.9-3.25.1 |
| SUSE Linux Enterprise Server 15-LTSS | dpdk-thunderx | 18.11.9-3.25.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | dpdk | 18.11.9-3.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | dpdk-thunderx | 18.11.9-3.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | dpdk | 18.11.9-3.25.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | dpdk | 18.11.9-3.15.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | dpdk-thunderx | 18.11.9-3.15.1 |
| Ubuntu 20.04 LTS | dpdk | 19.11.3-0ubuntu0.2 |
| openSUSE Leap 15.1 | dpdk | 18.11.9-lp151.3.8.1 |
| openSUSE Leap 15.2 | dpdk | 19.11.4-lp152.2.8.1 |