CVE Database
/

CVE-2020-14378

Back to search

CVE-2020-14378

Published: Sep 30, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc` function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause `move_desc` to get stuck in a 4,294,967,295-count iteration loop. Depending on how `vhost_crypto` is being used this could prevent other VMs or network tasks from being serviced by the busy DPDK lcore for an extended period.

VendorProductVersions

n/a

dpdk

affected
All dpdk versions before 18.11.10 and before 19.11.5

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now