CVE-2020-14374

Priority
Description
A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A
flawed bounds checking in the copy_data function leads to a buffer overflow
allowing an attacker in a virtual machine to write arbitrary data to any
address in the vhost_crypto application. The highest threat from this
vulnerability is to data confidentiality and integrity as well as system
availability.
Assigned-to
mdeslaur
Notes
Package
Source: dpdk (LP Ubuntu Debian)
Upstream:needs-triage
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (code not present)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (code not present)
Ubuntu 20.04 LTS (Focal Fossa):released (19.11.3-0ubuntu0.2)
Ubuntu 20.10 (Groovy Gorilla):released (19.11.5-1)
More Information

Updated: 2020-10-15 02:27:05 UTC (commit c422c0bce0600d2a0b7af63177d967cd3f564a78)