ISOMAN

CVE

CVE-2020-14378

An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc` function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause `move_desc` to get stuck in a 4,294,967,295-count iteration loop. Depending on how `vhost_crypto` is being used this could prevent other VMs or network tasks from being serviced by the busy DPDK lcore for an extended period.

Severity
LOW
CVSS
3.3
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu20.04.6 amd64 desktopunknownsource
Ubuntu20.04.6 amd64 live-serverunknownsource

References

  1. http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00004.html
  2. http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00006.html
  3. http://www.openwall.com/lists/oss-security/2021/01/04/1
  4. http://www.openwall.com/lists/oss-security/2021/01/04/2
  5. http://www.openwall.com/lists/oss-security/2021/01/04/5
  6. https://bugzilla.redhat.com/show_bug.cgi?id=1879473
  7. https://usn.ubuntu.com/4550-1/
  8. https://www.openwall.com/lists/oss-security/2020/09/28/3
  9. http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00004.html
  10. http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00006.html
  11. http://www.openwall.com/lists/oss-security/2021/01/04/1
  12. http://www.openwall.com/lists/oss-security/2021/01/04/2
  13. http://www.openwall.com/lists/oss-security/2021/01/04/5
  14. https://bugzilla.redhat.com/show_bug.cgi?id=1879473
  15. https://usn.ubuntu.com/4550-1/
  16. https://www.openwall.com/lists/oss-security/2020/09/28/3