CVE-2019-14818
14.11.2019, 17:15
A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhost_user socket, can send specially crafted VRING_SET_NUM messages, resulting in a memory leak including file descriptors. This flaw could lead to a denial of service condition.Enginsight
| Vendor | Product | Version |
|---|---|---|
| dpdk | data_plane_development_kit | 16.04 ≤ 𝑥 < 16.11.10 |
| dpdk | data_plane_development_kit | 17.02 ≤ 𝑥 < 17.11.8 |
| dpdk | data_plane_development_kit | 18.02 ≤ 𝑥 < 18.11.4 |
| dpdk | data_plane_development_kit | 19.02 ≤ 𝑥 < 19.08.1 |
| redhat | enterprise_linux_fast_datapath | 7.0 |
| redhat | enterprise_linux_fast_datapath | 8.0 |
| redhat | virtualization_eus | 4.2 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| dpdk |
|
Common Weakness Enumeration
References