CVE-2020-10722
A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer...
A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
5.1
A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.
- Record
CVE-2020-10722- CVSS 3.1
- 5.1 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
EUVDEUVD-2020-3149
5.1
A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.
- Record
EUVD-2020-3149- CVSS 3.1
- 5.1 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-63gx-gp99-wcgc
6.7
A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer...
A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.
- Record
GHSA-63gx-gp99-wcgc- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
NVD
5.1
A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.
- Record
CVE-2020-10722- CVSS 3.1
- 5.1 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H - CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-190
- Updated
- 2026-11-02
OSVALPINE-CVE-2020-10722
6.7
A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.
- Record
ALPINE-CVE-2020-10722- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVAZL-38845
6.7
CVE-2020-10722 affecting package ceph for versions less than 18.2.2-1
A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.
- Record
AZL-38845- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-05
Show 19 moreShow less
OSV
6.7
A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.
- Record
CVE-2020-10722- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2020-10722
6.7
A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.
- Record
DEBIAN-CVE-2020-10722- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:2295
7.7
Red Hat Security Advisory: openvswitch2.13 security, bug fix and enhancement update
- Record
RHSA-2020:2295- CVSS 3.1
- 7.7 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2020:2296
6.7
Red Hat Security Advisory: openvswitch2.11 security, bug fix and enhancement update
- Record
RHSA-2020:2296- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:2297
6.7
Red Hat Security Advisory: openvswitch2.11 security, bug fix and enhancement update
- Record
RHSA-2020:2297- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:2298
6.7
Red Hat Security Advisory: openvswitch security, bug fix and enhancement update
- Record
RHSA-2020:2298- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:2683
6.7
Red Hat Security Advisory: dpdk security, bug fix, and enhancement update
- Record
RHSA-2020:2683- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:4114
6.7
Red Hat Security Advisory: Red Hat Virtualization security and bug fix update
- Record
RHSA-2020:4114- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:4806
7.7
Red Hat Security Advisory: dpdk security, bug fix, and enhancement update
- Record
RHSA-2020:4806- CVSS 3.1
- 7.7 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2021:0931
9.8
Red Hat Security Advisory: openvswitch2.11 and ovn2.11 security update
- Record
RHSA-2021:0931- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-10722
6.7
A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.
- Record
UBUNTU-CVE-2020-10722- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 5.1 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2020:0693-1 No score
Security update for dpdk
This update for dpdk fixes the following issues:
Security issues fixed:
- CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171477).
- CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171477).
- CVE-2020-10724: Fixed a missing inputs validation in Vhost-crypto (bsc#1171477).
- CVE-2020-10725: Fixed a segfault caused by invalid virtio descriptors sent from a malicious guest (bsc#1171477).
- CVE-2020-10726: Fixed a denial-of-service caused by VHOST_USER_GET_INFLIGHT_FD message flooding (bsc#1171477).
This update was imported from the SUSE:SLE-15-SP1:Update update project.
- Record
openSUSE-SU-2020:0693-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10727-1 No score
dpdk-19.11.8-2.7 on GA media
These are all security issues fixed in the dpdk-19.11.8-2.7 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10727-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:1334-1 No score
Security update for dpdk
This update for dpdk fixes the following issues:
Security issues fixed:
- CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171477).
- CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171477).
- CVE-2020-10724: Fixed a missing inputs validation in Vhost-crypto (bsc#1171477).
- CVE-2020-10725: Fixed a segfault caused by invalid virtio descriptors sent from a malicious guest (bsc#1171477).
- CVE-2020-10726: Fixed a denial-of-service caused by VHOST_USER_GET_INFLIGHT_FD message flooding (bsc#1171477).
- Record
SUSE-SU-2020:1334-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:1335-1 No score
Security update for dpdk
This update for dpdk fixes the following issues:
Security issues fixed:
- CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171477).
- CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171477).
- CVE-2020-10724: Fixed a missing inputs validation in Vhost-crypto (bsc#1171477).
- CVE-2020-10725: Fixed a segfault caused by invalid virtio descriptors sent from a malicious guest (bsc#1171477).
- CVE-2020-10726: Fixed a denial-of-service caused by VHOST_USER_GET_INFLIGHT_FD message flooding (bsc#1171477).
- Record
SUSE-SU-2020:1335-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:1430-1 No score
Security update for dpdk
This update for dpdk to 17.11.7 fixes the following issues:
Security issues fixed:
- CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171477 bsc#1171930).
- CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171477).
- Record
SUSE-SU-2020:1430-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:1552-1 No score
Security update for dpdk
This update for dpdk fixes the following issues:
- CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171930).
- CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171925).
- CVE-2020-10724: Fixed a missing inputs validation in Vhost-crypto (bsc#1171926).
- Record
SUSE-SU-2020:1552-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:2194-1 No score
Security update for dpdk
This update for dpdk to version 16.11.9 following issue:
-
CVE-2019-14818: Fixed a memory leak vulnerability caused by a malicious container may lead to to denial of service (bsc#1156146).
-
CVE-2020-12693: Fixed an authentication bypass via an alternate path or channel (boo#1172004).
-
rebuilt with new signing key. (bsc#1174543)
- Record
SUSE-SU-2020:2194-1- Updated
- 2026-11-02
OSVUSN-4362-1 No score
dpdk vulnerabilities
It was discovered that DPDK incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or execute arbitrary code. (CVE-2020-10722, CVE-2020-10723, CVE-2020-10724, CVE-2020-10725, CVE-2020-10726)
- Record
USN-4362-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openvswitchAlpine:v3.13 |
before 2.12.1-r0 | 2.12.1-r0 |
openvswitchAlpine:v3.14 |
before 2.12.1-r0 | 2.12.1-r0 |
openvswitchAlpine:v3.15 |
before 2.12.1-r0 | 2.12.1-r0 |
openvswitchAlpine:v3.16 |
before 2.12.1-r0 | 2.12.1-r0 |
openvswitchAlpine:v3.17 |
before 2.12.1-r0 | 2.12.1-r0 |
openvswitchAlpine:v3.18 |
before 2.12.1-r0 | 2.12.1-r0 |
openvswitchAlpine:v3.19 |
before 2.12.1-r0 | 2.12.1-r0 |
openvswitchAlpine:v3.20 |
before 2.12.1-r0 | 2.12.1-r0 |
openvswitchAlpine:v3.21 |
before 2.12.1-r0 | 2.12.1-r0 |
openvswitchAlpine:v3.22 |
before 2.12.1-r0 | 2.12.1-r0 |
Show 118 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openvswitchAlpine:v3.23 |
before 2.12.1-r0 | 2.12.1-r0 |
openvswitchAlpine:v3.24 |
before 2.12.1-r0 | 2.12.1-r0 |
cephAzure Linux:3 |
before 18.2.2-1 | 18.2.2-1 |
dpdkDebian:12 |
before 19.11.2-1 | 19.11.2-1 |
dpdkDebian:13 |
before 19.11.2-1 | 19.11.2-1 |
dpdkDebian:14 |
before 19.11.2-1 | 19.11.2-1 |
dpdkDebian:9 |
before 16.11.11-1+deb9u2, plus listed versions 16.11-116.11.1-216.11.11-1+deb9u116.11.2-116.11.2-2 Show 11 moreShow less16.11.2-316.11.2-416.11.3-116.11.3-1~bpo9+116.11.4-116.11.4-1+deb9u116.11.4-1~bpo9+116.11.6-1+deb9u116.11.8-1+deb9u116.11.9-1+deb9u116.11.9-1+deb9u2 |
16.11.11-1+deb9u2 |
dpdkDebian:10 |
before 18.11.6-1~deb10u2, plus listed versions 18.11-618.11.1-118.11.1-218.11.1-318.11.2-1 Show 10 moreShow less18.11.2-218.11.2-2+deb10u118.11.2-2+deb10u218.11.2-318.11.2-418.11.3-118.11.4-118.11.5-118.11.5-1~deb10u118.11.6-1~deb10u1 |
18.11.6-1~deb10u2 |
network-scripts-openvswitch2.13Red Hat:enterprise_linux:8::fastdatapath From an advisory covering 5 CVEs |
before 0:2.13.0-25.el8fdp.1 | 0:2.13.0-25.el8fdp.1 |
openvswitch2.13Red Hat:enterprise_linux:8::fastdatapath From an advisory covering 5 CVEs |
before 0:2.13.0-25.el8fdp.1 | 0:2.13.0-25.el8fdp.1 |
openvswitch2.13-debuginfoRed Hat:enterprise_linux:8::fastdatapath From an advisory covering 5 CVEs |
before 0:2.13.0-25.el8fdp.1 | 0:2.13.0-25.el8fdp.1 |
openvswitch2.13-debugsourceRed Hat:enterprise_linux:8::fastdatapath From an advisory covering 5 CVEs |
before 0:2.13.0-25.el8fdp.1 | 0:2.13.0-25.el8fdp.1 |
openvswitch2.13-develRed Hat:enterprise_linux:8::fastdatapath From an advisory covering 5 CVEs |
before 0:2.13.0-25.el8fdp.1 | 0:2.13.0-25.el8fdp.1 |
openvswitch2.13-testRed Hat:enterprise_linux:8::fastdatapath From an advisory covering 5 CVEs |
before 0:2.13.0-25.el8fdp.1 | 0:2.13.0-25.el8fdp.1 |
python3-openvswitch2.13Red Hat:enterprise_linux:8::fastdatapath From an advisory covering 5 CVEs |
before 0:2.13.0-25.el8fdp.1 | 0:2.13.0-25.el8fdp.1 |
python3-openvswitch2.13-debuginfoRed Hat:enterprise_linux:8::fastdatapath From an advisory covering 5 CVEs |
before 0:2.13.0-25.el8fdp.1 | 0:2.13.0-25.el8fdp.1 |
openvswitch2.11Red Hat:enterprise_linux:7::fastdatapath From an advisory covering 3 CVEs |
before 0:2.11.0-54.20200327gita4efc59.el7fdp | 0:2.11.0-54.20200327gita4efc59.el7fdp |
openvswitch2.11-debuginfoRed Hat:enterprise_linux:7::fastdatapath From an advisory covering 3 CVEs |
before 0:2.11.0-54.20200327gita4efc59.el7fdp | 0:2.11.0-54.20200327gita4efc59.el7fdp |
openvswitch2.11-develRed Hat:enterprise_linux:7::fastdatapath From an advisory covering 3 CVEs |
before 0:2.11.0-54.20200327gita4efc59.el7fdp | 0:2.11.0-54.20200327gita4efc59.el7fdp |
openvswitch2.11-testRed Hat:enterprise_linux:7::fastdatapath From an advisory covering 3 CVEs |
before 0:2.11.0-54.20200327gita4efc59.el7fdp | 0:2.11.0-54.20200327gita4efc59.el7fdp |
python-openvswitch2.11Red Hat:enterprise_linux:7::fastdatapath From an advisory covering 3 CVEs |
before 0:2.11.0-54.20200327gita4efc59.el7fdp | 0:2.11.0-54.20200327gita4efc59.el7fdp |
network-scripts-openvswitch2.11Red Hat:enterprise_linux:8::fastdatapath From an advisory covering 3 CVEs |
before 0:2.11.0-54.20200327gita4efc59.el8fdp | 0:2.11.0-54.20200327gita4efc59.el8fdp |
openvswitch2.11Red Hat:enterprise_linux:8::fastdatapath From an advisory covering 3 CVEs |
before 0:2.11.0-54.20200327gita4efc59.el8fdp | 0:2.11.0-54.20200327gita4efc59.el8fdp |
openvswitch2.11-debuginfoRed Hat:enterprise_linux:8::fastdatapath From an advisory covering 3 CVEs |
before 0:2.11.0-54.20200327gita4efc59.el8fdp | 0:2.11.0-54.20200327gita4efc59.el8fdp |
openvswitch2.11-debugsourceRed Hat:enterprise_linux:8::fastdatapath From an advisory covering 3 CVEs |
before 0:2.11.0-54.20200327gita4efc59.el8fdp | 0:2.11.0-54.20200327gita4efc59.el8fdp |
openvswitch2.11-develRed Hat:enterprise_linux:8::fastdatapath From an advisory covering 3 CVEs |
before 0:2.11.0-54.20200327gita4efc59.el8fdp | 0:2.11.0-54.20200327gita4efc59.el8fdp |
openvswitch2.11-testRed Hat:enterprise_linux:8::fastdatapath From an advisory covering 3 CVEs |
before 0:2.11.0-54.20200327gita4efc59.el8fdp | 0:2.11.0-54.20200327gita4efc59.el8fdp |
python3-openvswitch2.11Red Hat:enterprise_linux:8::fastdatapath From an advisory covering 3 CVEs |
before 0:2.11.0-54.20200327gita4efc59.el8fdp | 0:2.11.0-54.20200327gita4efc59.el8fdp |
python3-openvswitch2.11-debuginfoRed Hat:enterprise_linux:8::fastdatapath From an advisory covering 3 CVEs |
before 0:2.11.0-54.20200327gita4efc59.el8fdp | 0:2.11.0-54.20200327gita4efc59.el8fdp |
openvswitchRed Hat:enterprise_linux:7::hypervisor From an advisory covering 2 CVEs |
before 0:2.9.0-130.el7fdp | 0:2.9.0-130.el7fdp |
openvswitch-debuginfoRed Hat:enterprise_linux:7::hypervisor From an advisory covering 2 CVEs |
before 0:2.9.0-130.el7fdp | 0:2.9.0-130.el7fdp |
openvswitch-develRed Hat:enterprise_linux:7::hypervisor From an advisory covering 2 CVEs |
before 0:2.9.0-130.el7fdp | 0:2.9.0-130.el7fdp |
openvswitch-ovn-commonRed Hat:enterprise_linux:7::hypervisor From an advisory covering 2 CVEs |
before 0:2.9.0-130.el7fdp | 0:2.9.0-130.el7fdp |
openvswitch-ovn-hostRed Hat:enterprise_linux:7::hypervisor From an advisory covering 2 CVEs |
before 0:2.9.0-130.el7fdp | 0:2.9.0-130.el7fdp |
python-openvswitchRed Hat:enterprise_linux:7::hypervisor From an advisory covering 2 CVEs |
before 0:2.9.0-130.el7fdp | 0:2.9.0-130.el7fdp |
openvswitchRed Hat:enterprise_linux:7::fastdatapath From an advisory covering 2 CVEs |
before 0:2.9.0-130.el7fdp | 0:2.9.0-130.el7fdp |
openvswitch-debuginfoRed Hat:enterprise_linux:7::fastdatapath From an advisory covering 2 CVEs |
before 0:2.9.0-130.el7fdp | 0:2.9.0-130.el7fdp |
openvswitch-develRed Hat:enterprise_linux:7::fastdatapath From an advisory covering 2 CVEs |
before 0:2.9.0-130.el7fdp | 0:2.9.0-130.el7fdp |
openvswitch-ovn-centralRed Hat:enterprise_linux:7::fastdatapath From an advisory covering 2 CVEs |
before 0:2.9.0-130.el7fdp | 0:2.9.0-130.el7fdp |
openvswitch-ovn-commonRed Hat:enterprise_linux:7::fastdatapath From an advisory covering 2 CVEs |
before 0:2.9.0-130.el7fdp | 0:2.9.0-130.el7fdp |
openvswitch-ovn-hostRed Hat:enterprise_linux:7::fastdatapath From an advisory covering 2 CVEs |
before 0:2.9.0-130.el7fdp | 0:2.9.0-130.el7fdp |
openvswitch-ovn-vtepRed Hat:enterprise_linux:7::fastdatapath From an advisory covering 2 CVEs |
before 0:2.9.0-130.el7fdp | 0:2.9.0-130.el7fdp |
openvswitch-testRed Hat:enterprise_linux:7::fastdatapath From an advisory covering 2 CVEs |
before 0:2.9.0-130.el7fdp | 0:2.9.0-130.el7fdp |
python-openvswitchRed Hat:enterprise_linux:7::fastdatapath From an advisory covering 2 CVEs |
before 0:2.9.0-130.el7fdp | 0:2.9.0-130.el7fdp |
dpdkRed Hat:rhel_extras_other:7 From an advisory covering 2 CVEs |
before 0:18.11.8-1.el7_8 | 0:18.11.8-1.el7_8 |
dpdk-debuginfoRed Hat:rhel_extras_other:7 From an advisory covering 2 CVEs |
before 0:18.11.8-1.el7_8 | 0:18.11.8-1.el7_8 |
dpdk-develRed Hat:rhel_extras_other:7 From an advisory covering 2 CVEs |
before 0:18.11.8-1.el7_8 | 0:18.11.8-1.el7_8 |
dpdk-docRed Hat:rhel_extras_other:7 From an advisory covering 2 CVEs |
before 0:18.11.8-1.el7_8 | 0:18.11.8-1.el7_8 |
dpdk-toolsRed Hat:rhel_extras_other:7 From an advisory covering 2 CVEs |
before 0:18.11.8-1.el7_8 | 0:18.11.8-1.el7_8 |
openvswitch2.11Red Hat:enterprise_linux:7::hypervisor From an advisory covering 2 CVEs |
before 0:2.11.0-54.20200327gita4efc59.el7fdp | 0:2.11.0-54.20200327gita4efc59.el7fdp |
openvswitch2.11-debuginfoRed Hat:enterprise_linux:7::hypervisor From an advisory covering 2 CVEs |
before 0:2.11.0-54.20200327gita4efc59.el7fdp | 0:2.11.0-54.20200327gita4efc59.el7fdp |
openvswitch2.11-develRed Hat:enterprise_linux:7::hypervisor From an advisory covering 2 CVEs |
before 0:2.11.0-54.20200327gita4efc59.el7fdp | 0:2.11.0-54.20200327gita4efc59.el7fdp |
ovn2.11Red Hat:enterprise_linux:7::hypervisor From an advisory covering 2 CVEs |
before 0:2.11.1-44.el7fdp | 0:2.11.1-44.el7fdp |
ovn2.11-debuginfoRed Hat:enterprise_linux:7::hypervisor From an advisory covering 2 CVEs |
before 0:2.11.1-44.el7fdp | 0:2.11.1-44.el7fdp |
ovn2.11-hostRed Hat:enterprise_linux:7::hypervisor From an advisory covering 2 CVEs |
before 0:2.11.1-44.el7fdp | 0:2.11.1-44.el7fdp |
ovn2.11-vtepRed Hat:enterprise_linux:7::hypervisor From an advisory covering 2 CVEs |
before 0:2.11.1-44.el7fdp | 0:2.11.1-44.el7fdp |
python-openvswitch2.11Red Hat:enterprise_linux:7::hypervisor From an advisory covering 2 CVEs |
before 0:2.11.0-54.20200327gita4efc59.el7fdp | 0:2.11.0-54.20200327gita4efc59.el7fdp |
openvswitch2.11Red Hat:rhev_manager:4.3 From an advisory covering 2 CVEs |
before 0:2.11.0-54.20200327gita4efc59.el7fdp | 0:2.11.0-54.20200327gita4efc59.el7fdp |
openvswitch2.11-debuginfoRed Hat:rhev_manager:4.3 From an advisory covering 2 CVEs |
before 0:2.11.0-54.20200327gita4efc59.el7fdp | 0:2.11.0-54.20200327gita4efc59.el7fdp |
openvswitch2.11-develRed Hat:rhev_manager:4.3 From an advisory covering 2 CVEs |
before 0:2.11.0-54.20200327gita4efc59.el7fdp | 0:2.11.0-54.20200327gita4efc59.el7fdp |
ovn2.11Red Hat:rhev_manager:4.3 From an advisory covering 2 CVEs |
before 0:2.11.1-44.el7fdp | 0:2.11.1-44.el7fdp |
ovn2.11-centralRed Hat:rhev_manager:4.3 From an advisory covering 2 CVEs |
before 0:2.11.1-44.el7fdp | 0:2.11.1-44.el7fdp |
ovn2.11-debuginfoRed Hat:rhev_manager:4.3 From an advisory covering 2 CVEs |
before 0:2.11.1-44.el7fdp | 0:2.11.1-44.el7fdp |
ovn2.11-vtepRed Hat:rhev_manager:4.3 From an advisory covering 2 CVEs |
before 0:2.11.1-44.el7fdp | 0:2.11.1-44.el7fdp |
python-openvswitch2.11Red Hat:rhev_manager:4.3 From an advisory covering 2 CVEs |
before 0:2.11.0-54.20200327gita4efc59.el7fdp | 0:2.11.0-54.20200327gita4efc59.el7fdp |
dpdkRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:19.11.3-1.el8 | 0:19.11.3-1.el8 |
dpdk-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:19.11.3-1.el8 | 0:19.11.3-1.el8 |
dpdk-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:19.11.3-1.el8 | 0:19.11.3-1.el8 |
dpdk-develRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:19.11.3-1.el8 | 0:19.11.3-1.el8 |
dpdk-devel-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:19.11.3-1.el8 | 0:19.11.3-1.el8 |
dpdk-docRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:19.11.3-1.el8 | 0:19.11.3-1.el8 |
dpdk-toolsRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:19.11.3-1.el8 | 0:19.11.3-1.el8 |
openvswitch-selinux-extra-policyRed Hat:openstack:13::el7 From an advisory covering 4 CVEs |
before 0:1.0-17.el7fdp | 0:1.0-17.el7fdp |
openvswitch2.11Red Hat:openstack:13::el7 From an advisory covering 4 CVEs |
before 0:2.11.3-77.el7fdp | 0:2.11.3-77.el7fdp |
openvswitch2.11-debuginfoRed Hat:openstack:13::el7 From an advisory covering 4 CVEs |
before 0:2.11.3-77.el7fdp | 0:2.11.3-77.el7fdp |
openvswitch2.11-develRed Hat:openstack:13::el7 From an advisory covering 4 CVEs |
before 0:2.11.3-77.el7fdp | 0:2.11.3-77.el7fdp |
ovn2.11Red Hat:openstack:13::el7 From an advisory covering 4 CVEs |
before 0:2.11.1-57.el7fdp | 0:2.11.1-57.el7fdp |
ovn2.11-centralRed Hat:openstack:13::el7 From an advisory covering 4 CVEs |
before 0:2.11.1-57.el7fdp | 0:2.11.1-57.el7fdp |
ovn2.11-debuginfoRed Hat:openstack:13::el7 From an advisory covering 4 CVEs |
before 0:2.11.1-57.el7fdp | 0:2.11.1-57.el7fdp |
ovn2.11-hostRed Hat:openstack:13::el7 From an advisory covering 4 CVEs |
before 0:2.11.1-57.el7fdp | 0:2.11.1-57.el7fdp |
ovn2.11-vtepRed Hat:openstack:13::el7 From an advisory covering 4 CVEs |
before 0:2.11.1-57.el7fdp | 0:2.11.1-57.el7fdp |
python-openvswitch2.11Red Hat:openstack:13::el7 From an advisory covering 4 CVEs |
before 0:2.11.3-77.el7fdp | 0:2.11.3-77.el7fdp |
openvswitch2.11-testRed Hat:openstack:13::el7 From an advisory covering 4 CVEs |
before 0:2.11.3-77.el7fdp | 0:2.11.3-77.el7fdp |
dpdkSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 5 CVEs |
before 18.11.3-3.19.2 | 18.11.3-3.19.2 |
dpdk-thunderxSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 5 CVEs |
before 18.11.3-3.19.2 | 18.11.3-3.19.2 |
dpdkSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 5 CVEs |
before 18.11.3-3.19.2 | 18.11.3-3.19.2 |
dpdk-thunderxSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 5 CVEs |
before 18.11.3-3.19.2 | 18.11.3-3.19.2 |
dpdkSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 5 CVEs |
before 18.11.3-3.19.2 | 18.11.3-3.19.2 |
dpdk-thunderxSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 5 CVEs |
before 18.11.3-3.19.2 | 18.11.3-3.19.2 |
dpdkSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 5 CVEs |
before 18.11.3-3.19.2 | 18.11.3-3.19.2 |
dpdkSUSE:Linux Enterprise Module for Server Applications 15 SP1 From an advisory covering 5 CVEs |
before 18.11.3-4.6.2 | 18.11.3-4.6.2 |
dpdkSUSE:Linux Enterprise Software Development Kit 12 SP4 From an advisory covering 3 CVEs |
before 17.11.7-5.6.2 | 17.11.7-5.6.2 |
dpdk-thunderxSUSE:Linux Enterprise Software Development Kit 12 SP4 From an advisory covering 3 CVEs |
before 17.11.7-5.6.2 | 17.11.7-5.6.2 |
dpdkSUSE:Linux Enterprise Server 12 SP4 From an advisory covering 3 CVEs |
before 17.11.7-5.6.2 | 17.11.7-5.6.2 |
dpdk-thunderxSUSE:Linux Enterprise Server 12 SP4 From an advisory covering 3 CVEs |
before 17.11.7-5.6.2 | 17.11.7-5.6.2 |
dpdkSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 3 CVEs |
before 17.11.7-5.6.2 | 17.11.7-5.6.2 |
dpdk-thunderxSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 3 CVEs |
before 17.11.7-5.6.2 | 17.11.7-5.6.2 |
dpdkSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 3 CVEs |
before 18.11.3-3.9.2 | 18.11.3-3.9.2 |
dpdk-thunderxSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 3 CVEs |
before 18.11.3-3.9.2 | 18.11.3-3.9.2 |
dpdkSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 3 CVEs |
before 18.11.3-3.9.2 | 18.11.3-3.9.2 |
dpdk-thunderxSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 3 CVEs |
before 18.11.3-3.9.2 | 18.11.3-3.9.2 |
dpdkSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 3 CVEs |
before 18.11.3-3.9.2 | 18.11.3-3.9.2 |
dpdk-thunderxSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 3 CVEs |
before 18.11.3-3.9.2 | 18.11.3-3.9.2 |
dpdkSUSE:HPE Helion OpenStack 8 From an advisory covering 2 CVEs |
before 16.11.9-8.15.13 | 16.11.9-8.15.13 |
dpdkSUSE:OpenStack Cloud 8 From an advisory covering 2 CVEs |
before 16.11.9-8.15.13 | 16.11.9-8.15.13 |
dpdkSUSE:OpenStack Cloud Crowbar 8 From an advisory covering 2 CVEs |
before 16.11.9-8.15.13 | 16.11.9-8.15.13 |
dpdkSUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 2 CVEs |
before 16.11.9-8.15.13 | 16.11.9-8.15.13 |
dpdkSUSE:Linux Enterprise Server 12 SP3-LTSS From an advisory covering 2 CVEs |
before 16.11.9-8.15.13 | 16.11.9-8.15.13 |
dpdk-thunderxSUSE:Linux Enterprise Server 12 SP3-LTSS From an advisory covering 2 CVEs |
before 16.11.9-8.15.10 | 16.11.9-8.15.10 |
dpdkSUSE:Linux Enterprise Server 12 SP3-BCL From an advisory covering 2 CVEs |
before 16.11.9-8.15.13 | 16.11.9-8.15.13 |
dpdkSUSE:Enterprise Storage 5 From an advisory covering 2 CVEs |
before 16.11.9-8.15.13 | 16.11.9-8.15.13 |
dpdk-thunderxSUSE:Enterprise Storage 5 From an advisory covering 2 CVEs |
before 16.11.9-8.15.10 | 16.11.9-8.15.10 |
dpdkUbuntu:18.04:LTS |
before 17.11.9-0ubuntu18.04.2, plus listed versions 17.05.2-0ubuntu117.05.2-0ubuntu217.11-317.11-417.11-5 Show 7 moreShow less17.11.1-617.11.2-1ubuntu0.117.11.3-3~ubuntu0.18.0417.11.5-0~ubuntu18.04.117.11.6-0~ubuntu18.04.117.11.8-0~ubuntu18.04.217.11.9-0ubuntu18.04.1 |
17.11.9-0ubuntu18.04.2 |
dpdkUbuntu:20.04:LTS |
before 19.11.1-0ubuntu1.1, plus listed versions 18.11.2-418.11.3-118.11.4-118.11.4-1ubuntu118.11.5-119.11-2ubuntu119.11-2ubuntu219.11.1-0ubuntu1 |
19.11.1-0ubuntu1.1 |
dpdkUbuntu:18.04:LTS From an advisory covering 5 CVEs |
before 17.11.9-0ubuntu18.04.2, plus listed versions 17.05.2-0ubuntu117.05.2-0ubuntu217.11-317.11-417.11-5 Show 7 moreShow less17.11.1-617.11.2-1ubuntu0.117.11.3-3~ubuntu0.18.0417.11.5-0~ubuntu18.04.117.11.6-0~ubuntu18.04.117.11.8-0~ubuntu18.04.217.11.9-0ubuntu18.04.1 |
17.11.9-0ubuntu18.04.2 |
dpdkUbuntu:20.04:LTS From an advisory covering 5 CVEs |
before 19.11.1-0ubuntu1.1, plus listed versions 18.11.2-418.11.3-118.11.4-118.11.4-1ubuntu118.11.5-119.11-2ubuntu119.11-2ubuntu219.11.1-0ubuntu1 |
19.11.1-0ubuntu1.1 |
dpdkopenSUSE:Leap 15.1 From an advisory covering 5 CVEs |
before 18.11.3-lp151.3.4.1 | 18.11.3-lp151.3.4.1 |
dpdkopenSUSE:Tumbleweed From an advisory covering 8 CVEs |
before 19.11.8-2.7 | 19.11.8-2.7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| facts | OSV | |
| affected, aliases, references | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-10722 is a medium vulnerability (CVSS 5.1) in [unknown] Dpdk, published May 18, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 31st percentile. Fixed in openvswitch 2.12.1-r0.
References
usn.ubuntu.com/4362-1
lists.opensuse.org/opensuse-security-announce/2020-05/msg00045.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRHKFVV4MRWNNJOYQOVP64L4UVWYPEO4
oracle.com/security-alerts/cpuoct2020.html
bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10722
openwall.com/lists/oss-security/2020/05/18/2
Show 99 moreShow less
bugs.dpdk.org/show_bug.cgi?id=267
oracle.com/security-alerts/cpujan2021.html
nvd.nist.gov/vuln/detail/CVE-2020-10722
lists.fedoraproject.org/archives/list/[email protected]/message/HRHKFVV4MRWNNJOYQOVP64L4UVWYPEO4
github.com/advisories/GHSA-63gx-gp99-wcgc
security.alpinelinux.org/vuln/CVE-2020-10722
security-tracker.debian.org/tracker/CVE-2020-10722
access.redhat.com/errata/RHSA-2020:2295
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=1803082
bugzilla.redhat.com/show_bug.cgi?id=1824825
bugzilla.redhat.com/show_bug.cgi?id=1828867
bugzilla.redhat.com/show_bug.cgi?id=1828874
bugzilla.redhat.com/show_bug.cgi?id=1828884
bugzilla.redhat.com/show_bug.cgi?id=1828894
bugzilla.redhat.com/show_bug.cgi?id=1828898
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2295.json
access.redhat.com/security/cve/CVE-2020-10722
cve.org/CVERecord?id=CVE-2020-10722
access.redhat.com/security/cve/CVE-2020-10723
cve.org/CVERecord?id=CVE-2020-10723
nvd.nist.gov/vuln/detail/CVE-2020-10723
bugs.dpdk.org/show_bug.cgi?id=268
access.redhat.com/security/cve/CVE-2020-10724
cve.org/CVERecord?id=CVE-2020-10724
nvd.nist.gov/vuln/detail/CVE-2020-10724
bugs.dpdk.org/show_bug.cgi?id=269
access.redhat.com/security/cve/CVE-2020-10725
cve.org/CVERecord?id=CVE-2020-10725
nvd.nist.gov/vuln/detail/CVE-2020-10725
bugs.dpdk.org/show_bug.cgi?id=270
access.redhat.com/security/cve/CVE-2020-10726
cve.org/CVERecord?id=CVE-2020-10726
nvd.nist.gov/vuln/detail/CVE-2020-10726
bugs.dpdk.org/show_bug.cgi?id=271
access.redhat.com/errata/RHSA-2020:2296
bugzilla.redhat.com/show_bug.cgi?id=1822653
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2296.json
access.redhat.com/errata/RHSA-2020:2297
bugzilla.redhat.com/show_bug.cgi?id=1822654
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2297.json
access.redhat.com/errata/RHSA-2020:2298
bugzilla.redhat.com/show_bug.cgi?id=1822198
bugzilla.redhat.com/show_bug.cgi?id=1826886
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2298.json
access.redhat.com/errata/RHSA-2020:2683
bugzilla.redhat.com/show_bug.cgi?id=1825276
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2683.json
access.redhat.com/errata/RHSA-2020:4114
bugzilla.redhat.com/show_bug.cgi?id=1849558
bugzilla.redhat.com/show_bug.cgi?id=1849595
bugzilla.redhat.com/show_bug.cgi?id=1855283
bugzilla.redhat.com/show_bug.cgi?id=1873117
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4114.json
access.redhat.com/errata/RHSA-2020:4806
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes
bugzilla.redhat.com/show_bug.cgi?id=1801361
bugzilla.redhat.com/show_bug.cgi?id=1813252
bugzilla.redhat.com/show_bug.cgi?id=1824905
bugzilla.redhat.com/show_bug.cgi?id=1868708
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4806.json
access.redhat.com/errata/RHSA-2021:0931
bugzilla.redhat.com/show_bug.cgi?id=1896536
bugzilla.redhat.com/show_bug.cgi?id=1905246
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0931.json
access.redhat.com/security/cve/CVE-2015-8011
cve.org/CVERecord?id=CVE-2015-8011
nvd.nist.gov/vuln/detail/CVE-2015-8011
openwall.com/lists/oss-security/2015/10/16/2
openwall.com/lists/oss-security/2015/10/30/2
suse.com/support/update/announcement/2020/suse-su-20201334-1
bugzilla.suse.com/1171477
suse.com/security/cve/CVE-2020-10722
suse.com/security/cve/CVE-2020-10723
suse.com/security/cve/CVE-2020-10724
suse.com/security/cve/CVE-2020-10725
suse.com/security/cve/CVE-2020-10726
suse.com/support/update/announcement/2020/suse-su-20201335-1
suse.com/support/update/announcement/2020/suse-su-20201430-1
bugzilla.suse.com/1171925
bugzilla.suse.com/1171930
suse.com/security/cve/CVE-2019-14818
suse.com/support/update/announcement/2020/suse-su-20201552-1
bugzilla.suse.com/1171926
suse.com/support/update/announcement/2020/suse-su-20202194-1
bugzilla.suse.com/1156146
bugzilla.suse.com/1174543
ubuntu.com/security/CVE-2020-10722
ubuntu.com/security/notices/USN-4362-1
ubuntu.com/security/CVE-2020-10723
ubuntu.com/security/CVE-2020-10724
ubuntu.com/security/CVE-2020-10725
ubuntu.com/security/CVE-2020-10726
lists.opensuse.org/archives/list/[email protected]/thread/662KDS7SYOF2U5AQLCDPYJDYUEUXXQWC
suse.com/security/cve/CVE-2018-1059
suse.com/security/cve/CVE-2020-14374
suse.com/security/cve/CVE-2020-14375
suse.com/security/cve/CVE-2020-14376
suse.com/security/cve/CVE-2020-14378