CVE-2020-10723
19.05.2020, 19:15
A memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an integer truncation on the index of a payload. Under certain circumstances, the index (a UInt) is copied and truncated into a uint16, which can lead to out of bound indexing and possible memory corruption.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| dpdk | data_plane_development_kit | 𝑥 ≤ 17.05 |
| canonical | ubuntu_linux | 18.04 |
| canonical | ubuntu_linux | 19.10 |
| canonical | ubuntu_linux | 20.04 |
| opensuse | leap | 15.1 |
| oracle | communications_session_border_controller | 8.2 ≤ 𝑥 ≤ 8.4 |
| oracle | enterprise_communications_broker | 3.1.0 |
| oracle | enterprise_communications_broker | 3.2.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| dpdk |
| ||||||||||||||||||||||||||||||||||
| dpdk-devel |
| ||||||||||||||||||||||||||||||||||
| dpdk-thunderx |
| ||||||||||||||||||||||||||||||||||
| dpdk-thunderx-devel |
| ||||||||||||||||||||||||||||||||||
| dpdk-tools |
| ||||||||||||||||||||||||||||||||||
| libdpdk-17_11 |
| ||||||||||||||||||||||||||||||||||
| libdpdk-18_11 |
| ||||||||||||||||||||||||||||||||||
| libdpdk-20_0 |
| ||||||||||||||||||||||||||||||||||
| libdpdk-25 |
|
Red Hat Enterprise Linux Releases
References