CVE-2020-14378
Fixed in a distro release EPSS <1%
An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc` function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause `move_desc` to get stuck in a 4,294,967,295-count iteration loop. Depending on how `vhost_crypto` is being used this could prevent other VMs or network tasks from being serviced by the busy DPDK lcore for an extended period.
Products: dpdk data_plane_development_kit, canonical ubuntu_linux, opensuse leap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | dpdk | 19.11.5-1 |
| Debian 13 | dpdk | 19.11.5-1 |
| Debian 14 | dpdk | 19.11.5-1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | dpdk | 18.11.9-3.25.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | dpdk-thunderx | 18.11.9-3.25.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | dpdk | 18.11.9-3.25.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | dpdk-thunderx | 18.11.9-3.25.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP2 | dpdk | 19.11.4-3.9.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP1 | dpdk | 18.11.9-4.12.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP2 | dpdk | 19.11.4-3.9.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP2 | dpdk-thunderx | 19.11.4-3.9.1 |
| SUSE Linux Enterprise Server 12 SP5 | dpdk | 18.11.9-3.15.1 |
| SUSE Linux Enterprise Server 12 SP5 | dpdk-thunderx | 18.11.9-3.15.1 |
| SUSE Linux Enterprise Server 15-LTSS | dpdk | 18.11.9-3.25.1 |
| SUSE Linux Enterprise Server 15-LTSS | dpdk-thunderx | 18.11.9-3.25.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | dpdk | 18.11.9-3.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | dpdk-thunderx | 18.11.9-3.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | dpdk | 18.11.9-3.25.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | dpdk | 18.11.9-3.15.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | dpdk-thunderx | 18.11.9-3.15.1 |
| Ubuntu 20.04 LTS | dpdk | 19.11.3-0ubuntu0.2 |
| openSUSE Leap 15.1 | dpdk | 18.11.9-lp151.3.8.1 |
| openSUSE Leap 15.2 | dpdk | 19.11.4-lp152.2.8.1 |
| openSUSE Tumbleweed | dpdk | 19.11.8-2.7 |