CVE-2020-14376

Priority
Description
A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A
lack of bounds checking when copying iv_data from the VM guest memory into
host memory can lead to a large buffer overflow. The highest threat from
this vulnerability is to data confidentiality and integrity as well as
system availability.
Assigned-to
mdeslaur
Notes
Package
Source: dpdk (LP Ubuntu Debian)
Upstream:needs-triage
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (code not present)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (code not present)
Ubuntu 20.04 LTS (Focal Fossa):released (19.11.3-0ubuntu0.2)
Ubuntu 20.10 (Groovy Gorilla):released (19.11.5-1)
More Information

Updated: 2020-10-15 02:27:25 UTC (commit c422c0bce0600d2a0b7af63177d967cd3f564a78)