CVE-2019-14818
14.11.2019, 17:15
A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhost_user socket, can send specially crafted VRING_SET_NUM messages, resulting in a memory leak including file descriptors. This flaw could lead to a denial of service condition.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| dpdk | data_plane_development_kit | 16.04 ≤ 𝑥 < 16.11.10 |
| dpdk | data_plane_development_kit | 17.02 ≤ 𝑥 < 17.11.8 |
| dpdk | data_plane_development_kit | 18.02 ≤ 𝑥 < 18.11.4 |
| dpdk | data_plane_development_kit | 19.02 ≤ 𝑥 < 19.08.1 |
| redhat | enterprise_linux_fast_datapath | 7.0 |
| redhat | enterprise_linux_fast_datapath | 8.0 |
| redhat | virtualization_eus | 4.2 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| dpdk |
|
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| dpdk |
| ||||||||||||||||||||||||||||||||||||||
| dpdk-devel |
| ||||||||||||||||||||||||||||||||||||||
| dpdk-thunderx |
| ||||||||||||||||||||||||||||||||||||||
| dpdk-thunderx-devel |
| ||||||||||||||||||||||||||||||||||||||
| dpdk-tools |
| ||||||||||||||||||||||||||||||||||||||
| libdpdk-17_11 |
| ||||||||||||||||||||||||||||||||||||||
| libdpdk-18_11 |
| ||||||||||||||||||||||||||||||||||||||
| libdpdk-20_0 |
| ||||||||||||||||||||||||||||||||||||||
| libdpdk-25 |
|
Red Hat Enterprise Linux Releases
Common Weakness Enumeration
References