ISOMAN

CVE

CVE-2020-14376

A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A lack of bounds checking when copying iv_data from the VM guest memory into host memory can lead to a large buffer overflow. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Severity
HIGH
CVSS
7.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu20.04.6 amd64 desktopunknownsource
Ubuntu20.04.6 amd64 live-serverunknownsource

References

  1. http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00004.html
  2. http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00006.html
  3. http://www.openwall.com/lists/oss-security/2021/01/04/1
  4. http://www.openwall.com/lists/oss-security/2021/01/04/2
  5. http://www.openwall.com/lists/oss-security/2021/01/04/5
  6. https://bugzilla.redhat.com/show_bug.cgi?id=1879470
  7. https://usn.ubuntu.com/4550-1/
  8. https://www.openwall.com/lists/oss-security/2020/09/28/3
  9. http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00004.html
  10. http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00006.html
  11. http://www.openwall.com/lists/oss-security/2021/01/04/1
  12. http://www.openwall.com/lists/oss-security/2021/01/04/2
  13. http://www.openwall.com/lists/oss-security/2021/01/04/5
  14. https://bugzilla.redhat.com/show_bug.cgi?id=1879470
  15. https://usn.ubuntu.com/4550-1/
  16. https://www.openwall.com/lists/oss-security/2020/09/28/3