ubuntu-cve-2020-14377
Vulnerability from osv_ubuntu
Published
2020-09-28 15:00
Modified
2026-04-22 07:39
Summary
Details
A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A complete lack of validation of attacker-controlled parameters can lead to a buffer over read. The results of the over read are then written back to the guest virtual machine memory. This vulnerability can be used by an attacker in a virtual machine to read significant amounts of host memory. The highest threat from this vulnerability is to data confidentiality and system availability.
Severity
7.1 (High)
N/A (UNKNOWN)
References
| URL | Type | |
|---|---|---|
{
"affected": [
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "dpdk",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "dpdk-igb-uio-dkms",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-acl20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-bbdev0.200",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-bitratestats20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-bpf0.200",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-bus-dpaa20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-bus-fslmc20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-bus-ifpga20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-bus-pci20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-bus-vdev20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-bus-vmbus20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-cfgfile20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-cmdline20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-common-cpt20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-common-dpaax20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-common-octeontx2-20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-common-octeontx20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-compressdev0.200",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-cryptodev20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-distributor20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-eal20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-efd20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-ethdev20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-eventdev20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-fib0.200",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-flow-classify0.200",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-gro20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-gso20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-hash20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-ip-frag20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-ipsec0.200",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-jobstats20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-kni20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-kvargs20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-latencystats20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-lpm20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-mbuf20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-member20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-mempool-bucket20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-mempool-dpaa2-20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-mempool-dpaa20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-mempool-octeontx2-20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-mempool-octeontx20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-mempool-ring20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-mempool-stack20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-mempool20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-meter20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-metrics20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-net20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pci20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pdump20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pipeline20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-aesni-gcm20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-aesni-mb20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-af-packet20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-ark20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-atlantic20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-avp20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-axgbe20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-bbdev-fpga-lte-fec20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-bbdev-null20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-bbdev-turbo-sw20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-bnx2x20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-bnxt20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-bond20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-caam-jr20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-ccp20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-crypto-scheduler20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-cxgbe20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-dpaa-event20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-dpaa-sec20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-dpaa2-20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-dpaa2-event20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-dpaa2-sec20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-dpaa20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-dsw-event20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-e1000-20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-ena20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-enetc20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-enic20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-failsafe20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-fm10k20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-hinic20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-hns3-20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-i40e20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-iavf20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-ice20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-ifc20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-isal20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-ixgbe20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-kni20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-liquidio20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-memif20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-mlx4-20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-mlx5-20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-netvsc20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-nfp20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-nitrox20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-null-crypto20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-null20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-octeontx-compress20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-octeontx-crypto20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-octeontx-event20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-octeontx2-20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-octeontx2-crypto20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-octeontx2-event20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-octeontx20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-opdl-event20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-openssl20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-pcap20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-pfe20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-qat20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-qede20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-ring20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-sfc20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-skeleton-event20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-softnic20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-sw-event20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-tap20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-thunderx20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-vdev-netvsc20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-vhost20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-virtio-crypto20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-virtio20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-vmxnet3-20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-pmd-zlib20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-port20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-power20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-rawdev-dpaa2-cmdif20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-rawdev-dpaa2-qdma20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-rawdev-ioat20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-rawdev-ntb20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-rawdev-octeontx2-dma20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-rawdev-skeleton20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-rawdev20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-rcu0.200",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-reorder20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-rib0.200",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-ring20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-sched20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-security20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-stack0.200",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-table20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-telemetry0.200",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-timer20.0",
"binary_version": "19.11.3-0ubuntu0.2"
},
{
"binary_name": "librte-vhost20.0",
"binary_version": "19.11.3-0ubuntu0.2"
}
]
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "dpdk",
"purl": "pkg:deb/ubuntu/dpdk@19.11.3-0ubuntu0.2?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "19.11.3-0ubuntu0.2"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"18.11.2-4",
"18.11.3-1",
"18.11.4-1",
"18.11.4-1ubuntu1",
"18.11.5-1",
"19.11-2ubuntu1",
"19.11-2ubuntu2",
"19.11.1-0ubuntu1",
"19.11.1-0ubuntu1.1",
"19.11.3-0ubuntu0.1"
]
}
],
"aliases": [],
"details": "A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A complete lack of validation of attacker-controlled parameters can lead to a buffer over read. The results of the over read are then written back to the guest virtual machine memory. This vulnerability can be used by an attacker in a virtual machine to read significant amounts of host memory. The highest threat from this vulnerability is to data confidentiality and system availability.",
"id": "UBUNTU-CVE-2020-14377",
"modified": "2026-04-22T07:39:26Z",
"published": "2020-09-28T15:00:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2020-14377"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-4550-1"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14377"
}
],
"related": [
"USN-4550-1"
],
"schema_version": "1.7.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2020-14377"
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…