{"id":"CVE-2020-10722","aliases":["ALPINE-CVE-2020-10722","AZL-38845","DEBIAN-CVE-2020-10722","DSA-4688-1","EUVD-2020-3149","GHSA-63gx-gp99-wcgc","RHSA-2020:2295","RHSA-2020:2296","RHSA-2020:2297","RHSA-2020:2298","RHSA-2020:2683","RHSA-2020:4114","RHSA-2020:4806","RHSA-2021:0931","SUSE-SU-2020:1334-1","SUSE-SU-2020:1335-1","SUSE-SU-2020:1430-1","SUSE-SU-2020:1552-1","SUSE-SU-2020:2194-1","UBUNTU-CVE-2020-10722","USN-4362-1","openSUSE-SU-2020:0693-1","openSUSE-SU-2024:10727-1"],"status":"published","title":"A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer...","description":"A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.","severity":{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00378,"percentile":0.3207,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2020-05-18T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.13","package":"openvswitch","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"openvswitch","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"openvswitch","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"openvswitch","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openvswitch","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openvswitch","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openvswitch","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openvswitch","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openvswitch","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openvswitch","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openvswitch","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openvswitch","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"ceph","fixed_in":["18.2.2-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"dpdk","fixed_in":["19.11.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"dpdk","fixed_in":["19.11.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"dpdk","fixed_in":["19.11.2-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"dpdk","fixed_in":["16.11.11-1+deb9u2"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"dpdk","fixed_in":["18.11.6-1~deb10u2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"dpdk","fixed_in":["17.11.9-0ubuntu18.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"dpdk","fixed_in":["19.11.1-0ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.13","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2.2-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.11.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.11.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.11.2-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.11.11-1+deb9u2"}]}],"versions":["16.11-1","16.11.1-2","16.11.11-1+deb9u1","16.11.2-1","16.11.2-2","16.11.2-3","16.11.2-4","16.11.3-1","16.11.3-1~bpo9+1","16.11.4-1","16.11.4-1+deb9u1","16.11.4-1~bpo9+1","16.11.6-1+deb9u1","16.11.8-1+deb9u1","16.11.9-1+deb9u1","16.11.9-1+deb9u2"]},{"source":"osv","ecosystem":"Debian:10","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.6-1~deb10u2"}]}],"versions":["18.11-6","18.11.1-1","18.11.1-2","18.11.1-3","18.11.2-1","18.11.2-2","18.11.2-2+deb10u1","18.11.2-2+deb10u2","18.11.2-3","18.11.2-4","18.11.3-1","18.11.4-1","18.11.5-1","18.11.5-1~deb10u1","18.11.6-1~deb10u1"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"network-scripts-openvswitch2.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-25.el8fdp.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-25.el8fdp.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-25.el8fdp.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-25.el8fdp.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-25.el8fdp.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-25.el8fdp.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"python3-openvswitch2.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-25.el8fdp.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"python3-openvswitch2.13-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-25.el8fdp.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch2.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-54.20200327gita4efc59.el7fdp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch2.11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-54.20200327gita4efc59.el7fdp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch2.11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-54.20200327gita4efc59.el7fdp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch2.11-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-54.20200327gita4efc59.el7fdp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"python-openvswitch2.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-54.20200327gita4efc59.el7fdp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"network-scripts-openvswitch2.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-54.20200327gita4efc59.el8fdp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-54.20200327gita4efc59.el8fdp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-54.20200327gita4efc59.el8fdp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.11-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-54.20200327gita4efc59.el8fdp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-54.20200327gita4efc59.el8fdp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.11-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-54.20200327gita4efc59.el8fdp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"python3-openvswitch2.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-54.20200327gita4efc59.el8fdp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"python3-openvswitch2.11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-54.20200327gita4efc59.el8fdp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-130.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"openvswitch-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-130.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"openvswitch-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-130.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"openvswitch-ovn-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-130.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"openvswitch-ovn-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-130.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"python-openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-130.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-130.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-130.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-130.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch-ovn-central","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-130.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch-ovn-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-130.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch-ovn-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-130.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch-ovn-vtep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-130.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"openvswitch-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-130.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::fastdatapath","package":"python-openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-130.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.11.8-1.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"dpdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.11.8-1.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"dpdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.11.8-1.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"dpdk-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.11.8-1.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"dpdk-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.11.8-1.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"openvswitch2.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-54.20200327gita4efc59.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"openvswitch2.11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-54.20200327gita4efc59.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"openvswitch2.11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-54.20200327gita4efc59.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"ovn2.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.1-44.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"ovn2.11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.1-44.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"ovn2.11-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.1-44.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"ovn2.11-vtep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.1-44.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"python-openvswitch2.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-54.20200327gita4efc59.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"openvswitch2.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-54.20200327gita4efc59.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"openvswitch2.11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-54.20200327gita4efc59.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"openvswitch2.11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-54.20200327gita4efc59.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"ovn2.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.1-44.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"ovn2.11-central","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.1-44.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"ovn2.11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.1-44.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"ovn2.11-vtep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.1-44.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"python-openvswitch2.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-54.20200327gita4efc59.el7fdp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.11.3-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dpdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.11.3-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dpdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.11.3-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dpdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.11.3-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dpdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.11.3-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dpdk-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.11.3-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dpdk-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.11.3-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openvswitch-selinux-extra-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-17.el7fdp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openvswitch2.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.3-77.el7fdp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openvswitch2.11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.3-77.el7fdp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openvswitch2.11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.3-77.el7fdp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"ovn2.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.1-57.el7fdp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"ovn2.11-central","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.1-57.el7fdp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"ovn2.11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.1-57.el7fdp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"ovn2.11-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.1-57.el7fdp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"ovn2.11-vtep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.1-57.el7fdp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"python-openvswitch2.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.3-77.el7fdp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openvswitch2.11-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.3-77.el7fdp"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-3.19.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"dpdk-thunderx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-3.19.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-3.19.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"dpdk-thunderx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-3.19.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-3.19.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"dpdk-thunderx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-3.19.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-3.19.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP1","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-4.6.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.11.7-5.6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"dpdk-thunderx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.11.7-5.6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.11.7-5.6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"dpdk-thunderx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.11.7-5.6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.11.7-5.6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"dpdk-thunderx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.11.7-5.6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-3.9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"dpdk-thunderx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-3.9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-3.9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"dpdk-thunderx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-3.9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-3.9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"dpdk-thunderx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-3.9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.11.9-8.15.13"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.11.9-8.15.13"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.11.9-8.15.13"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.11.9-8.15.13"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.11.9-8.15.13"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"dpdk-thunderx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.11.9-8.15.10"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.11.9-8.15.13"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.11.9-8.15.13"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"dpdk-thunderx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.11.9-8.15.10"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.11.9-0ubuntu18.04.2"}]}],"versions":["17.05.2-0ubuntu1","17.05.2-0ubuntu2","17.11-3","17.11-4","17.11-5","17.11.1-6","17.11.2-1ubuntu0.1","17.11.3-3~ubuntu0.18.04","17.11.5-0~ubuntu18.04.1","17.11.6-0~ubuntu18.04.1","17.11.8-0~ubuntu18.04.2","17.11.9-0ubuntu18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.11.1-0ubuntu1.1"}]}],"versions":["18.11.2-4","18.11.3-1","18.11.4-1","18.11.4-1ubuntu1","18.11.5-1","19.11-2ubuntu1","19.11-2ubuntu2","19.11.1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.11.9-0ubuntu18.04.2"}]}],"versions":["17.05.2-0ubuntu1","17.05.2-0ubuntu2","17.11-3","17.11-4","17.11-5","17.11.1-6","17.11.2-1ubuntu0.1","17.11.3-3~ubuntu0.18.04","17.11.5-0~ubuntu18.04.1","17.11.6-0~ubuntu18.04.1","17.11.8-0~ubuntu18.04.2","17.11.9-0ubuntu18.04.1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.11.1-0ubuntu1.1"}]}],"versions":["18.11.2-4","18.11.3-1","18.11.4-1","18.11.4-1ubuntu1","18.11.5-1","19.11-2ubuntu1","19.11-2ubuntu2","19.11.1-0ubuntu1"],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-lp151.3.4.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.11.8-2.7"}]}],"bundled":8}],"products":[{"vendor":"[unknown]","product":"dpdk"},{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"dpdk","product":"data_plane_development_kit"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"opensuse","product":"leap"},{"vendor":"oracle","product":"communications_session_border_controller"},{"vendor":"oracle","product":"enterprise_communications_broker"}],"references":[{"url":"https://usn.ubuntu.com/4362-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00045.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRHKFVV4MRWNNJOYQOVP64L4UVWYPEO4/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10722","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://www.openwall.com/lists/oss-security/2020/05/18/2","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"https://bugs.dpdk.org/show_bug.cgi?id=267","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Vendor Advisory","fix","article"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10722","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HRHKFVV4MRWNNJOYQOVP64L4UVWYPEO4/"},{"url":"https://github.com/advisories/GHSA-63gx-gp99-wcgc"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-10722","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-10722","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:2295","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1803082","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1824825","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828867","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828874","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828884","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828894","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828898","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2295.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10722","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10722","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10723","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10723","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10723","tags":["advisory"]},{"url":"https://bugs.dpdk.org/show_bug.cgi?id=268","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10724","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10724","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10724","tags":["advisory"]},{"url":"https://bugs.dpdk.org/show_bug.cgi?id=269","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10725","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10725","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10725","tags":["advisory"]},{"url":"https://bugs.dpdk.org/show_bug.cgi?id=270","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10726","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10726","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10726","tags":["advisory"]},{"url":"https://bugs.dpdk.org/show_bug.cgi?id=271","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2020:2296","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1822653","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2296.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:2297","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1822654","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2297.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:2298","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1822198","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1826886","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2298.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:2683","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1825276","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2683.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4114","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1849558","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1849595","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1855283","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1873117","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4114.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4806","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801361","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1813252","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1824905","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1868708","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4806.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0931","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1896536","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1905246","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0931.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8011","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8011","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8011","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/10/16/2","tags":["article"]},{"url":"http://www.openwall.com/lists/oss-security/2015/10/30/2","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201334-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1171477","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10726","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201335-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201430-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1171925","tags":["report"]},{"url":"https://bugzilla.suse.com/1171930","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14818","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201552-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1171926","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202194-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1156146","tags":["report"]},{"url":"https://bugzilla.suse.com/1174543","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-10722","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4362-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-10723","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-10724","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-10725","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-10726","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/662KDS7SYOF2U5AQLCDPYJDYUEUXXQWC/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14378","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-10722","description":"A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.","status":"published","published":"2020-05-19T18:04:15Z","modified":"2024-08-04T11:14:14.909Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:35:47.877975Z"}],"euvd":[{"id":"EUVD-2020-3149","description":"A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.","status":"published","published":"2020-05-19T18:04:15Z","modified":"2024-08-04T11:14:14Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-03T03:07:49.454544Z"}],"ghsa":[{"id":"GHSA-63gx-gp99-wcgc","title":"A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer...","description":"A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.","status":"published","published":"2022-05-24T17:18:06Z","modified":"2023-01-31T05:02:19Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:48:13.960905Z"}],"nvd":[{"id":"CVE-2020-10722","description":"A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.","status":"published","published":"2020-05-19T19:15:09.727Z","modified":"2026-06-17T02:48:19.207Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:06:00.784809Z"}],"osv":[{"id":"ALPINE-CVE-2020-10722","description":"A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.","status":"published","published":"2020-05-19T19:15:09.727Z","modified":"2026-11-03T06:32:35.909039577Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T07:17:20.312441Z"},{"id":"AZL-38845","title":"CVE-2020-10722 affecting package ceph for versions less than 18.2.2-1","description":"A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.","status":"published","published":"2020-05-19T19:15:09Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-05T16:41:19.751978Z"},{"id":"CVE-2020-10722","description":"A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.","status":"published","published":"2020-05-19T19:15:09.727Z","modified":"2026-10-24T10:30:41.104671238Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:13.492058Z"},{"id":"DEBIAN-CVE-2020-10722","description":"A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.","status":"published","published":"2020-05-19T19:15:09.727Z","modified":"2026-10-26T12:00:04.429444865Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:32.862554Z"},{"id":"RHSA-2020:2295","title":"Red Hat Security Advisory: openvswitch2.13 security, bug fix and enhancement update","status":"published","published":"2024-09-13T22:03:18Z","modified":"2026-06-29T10:30:29Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:2296","title":"Red Hat Security Advisory: openvswitch2.11 security, bug fix and enhancement update","status":"published","published":"2024-09-13T22:03:28Z","modified":"2026-06-29T10:30:30Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:2297","title":"Red Hat Security Advisory: openvswitch2.11 security, bug fix and enhancement update","status":"published","published":"2024-09-13T22:03:35Z","modified":"2026-06-29T10:30:31Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:2298","title":"Red Hat Security Advisory: openvswitch security, bug fix and enhancement update","status":"published","published":"2024-09-13T22:03:43Z","modified":"2026-06-29T10:30:31Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:2683","title":"Red Hat Security Advisory: dpdk security, bug fix, and enhancement update","status":"published","published":"2024-09-13T22:05:09Z","modified":"2026-06-29T10:30:52Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:4114","title":"Red Hat Security Advisory: Red Hat Virtualization security and bug fix update","status":"published","published":"2024-09-13T22:08:31Z","modified":"2026-06-29T10:32:09Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:4806","title":"Red Hat Security Advisory: dpdk security, bug fix, and enhancement update","status":"published","published":"2024-09-13T22:10:37Z","modified":"2026-06-29T10:32:43Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2021:0931","title":"Red Hat Security Advisory: openvswitch2.11 and ovn2.11 security update","status":"published","published":"2024-09-13T22:13:09Z","modified":"2026-06-29T10:34:36Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"UBUNTU-CVE-2020-10722","description":"A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.","status":"published","published":"2020-05-18T15:00:00Z","modified":"2026-04-22T12:26:06.098845Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"},{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:22.212782Z"},{"id":"DSA-4688-1","title":"dpdk - security update","status":"published","published":"2020-05-18T00:00:00Z","modified":"2026-03-09T02:09:52.497482Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"openSUSE-SU-2020:0693-1","title":"Security update for dpdk","description":"This update for dpdk fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171477).\n- CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171477).\n- CVE-2020-10724: Fixed a missing inputs validation in Vhost-crypto (bsc#1171477).\n- CVE-2020-10725: Fixed a segfault caused by invalid virtio descriptors sent from a malicious guest (bsc#1171477).\n- CVE-2020-10726: Fixed a denial-of-service caused by VHOST_USER_GET_INFLIGHT_FD message flooding (bsc#1171477).\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2020-05-22T16:18:48Z","modified":"2026-02-04T02:40:13.873222Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:10727-1","title":"dpdk-19.11.8-2.7 on GA media","description":"These are all security issues fixed in the dpdk-19.11.8-2.7 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:06:53.124695Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2020:1334-1","title":"Security update for dpdk","description":"This update for dpdk fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171477).\n- CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171477).\n- CVE-2020-10724: Fixed a missing inputs validation in Vhost-crypto (bsc#1171477).\n- CVE-2020-10725: Fixed a segfault caused by invalid virtio descriptors sent from a malicious guest (bsc#1171477).\n- CVE-2020-10726: Fixed a denial-of-service caused by VHOST_USER_GET_INFLIGHT_FD message flooding (bsc#1171477).\n","status":"published","published":"2020-05-19T11:19:55Z","modified":"2026-02-04T03:35:21.334652Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1335-1","title":"Security update for dpdk","description":"This update for dpdk fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171477).\n- CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171477).\n- CVE-2020-10724: Fixed a missing inputs validation in Vhost-crypto (bsc#1171477).\n- CVE-2020-10725: Fixed a segfault caused by invalid virtio descriptors sent from a malicious guest (bsc#1171477).\n- CVE-2020-10726: Fixed a denial-of-service caused by VHOST_USER_GET_INFLIGHT_FD message flooding (bsc#1171477).\n","status":"published","published":"2020-05-19T11:20:24Z","modified":"2026-02-04T03:40:46.883471Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1430-1","title":"Security update for dpdk","description":"This update for dpdk to 17.11.7 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171477 bsc#1171930).\n- CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171477).\n","status":"published","published":"2020-05-26T15:37:14Z","modified":"2026-02-04T03:12:33.96543Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1552-1","title":"Security update for dpdk","description":"This update for dpdk fixes the following issues:\n\n- CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171930).\n- CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171925).\n- CVE-2020-10724: Fixed a missing inputs validation in Vhost-crypto (bsc#1171926).\n","status":"published","published":"2020-06-08T07:32:41Z","modified":"2026-02-04T02:25:54.62748Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:2194-1","title":"Security update for dpdk","description":"This update for dpdk to version 16.11.9 following issue:\n\n- CVE-2019-14818: Fixed a memory leak vulnerability caused by a malicious container may lead to to denial of service (bsc#1156146).\n- CVE-2020-12693: Fixed an authentication bypass via an alternate path or channel (boo#1172004).\n\n- rebuilt with new signing key. (bsc#1174543)\n","status":"published","published":"2020-08-11T11:29:07Z","modified":"2026-02-04T03:47:34.776432Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"USN-4362-1","title":"dpdk vulnerabilities","description":"It was discovered that DPDK incorrectly handled certain inputs.\nAn attacker could possibly use this issue to cause a crash or\nexecute arbitrary code. (CVE-2020-10722, CVE-2020-10723,\nCVE-2020-10724, CVE-2020-10725, CVE-2020-10726)\n","status":"published","published":"2020-05-18T13:22:40Z","modified":"2026-04-22T10:04:13.930955Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}
