{"id":"CVE-2020-10725","aliases":["DEBIAN-CVE-2020-10725","EUVD-2020-3152","GHSA-rccg-5mcc-m2cf","RHSA-2020:2295","RHSA-2020:4806","RHSA-2021:1239","SUSE-SU-2020:1334-1","SUSE-SU-2020:1335-1","UBUNTU-CVE-2020-10725","USN-4362-1","openSUSE-SU-2020:0693-1","openSUSE-SU-2024:10727-1"],"status":"published","title":"A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a...","description":"A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vhost-user backend application running on the host, which could result in a loss of connectivity for the other guests running on that host. This is caused by a missing validity check of the descriptor address in the function `virtio_dev_rx_batch_packed()`.","severity":{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.02213,"percentile":0.82851,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-665"],"published":"2020-05-18T13:22:40Z","modified":"2026-10-26T12:00:16Z","fixes":[{"ecosystem":"Debian:12","package":"dpdk","fixed_in":["19.11.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"dpdk","fixed_in":["19.11.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"dpdk","fixed_in":["19.11.2-1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"dpdk","fixed_in":["0:19.11-5.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"dpdk-debuginfo","fixed_in":["0:19.11-5.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"dpdk-debugsource","fixed_in":["0:19.11-5.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"dpdk-devel","fixed_in":["0:19.11-5.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"dpdk-devel-debuginfo","fixed_in":["0:19.11-5.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"dpdk-doc","fixed_in":["0:19.11-5.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"dpdk-tools","fixed_in":["0:19.11-5.el8_2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"dpdk","fixed_in":["19.11.1-0ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.11.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.11.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.11.2-1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"network-scripts-openvswitch2.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-25.el8fdp.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-25.el8fdp.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-25.el8fdp.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-25.el8fdp.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-25.el8fdp.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-25.el8fdp.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"python3-openvswitch2.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-25.el8fdp.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"python3-openvswitch2.13-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-25.el8fdp.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.11.3-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dpdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.11.3-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dpdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.11.3-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dpdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.11.3-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dpdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.11.3-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dpdk-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.11.3-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dpdk-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.11.3-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.11-5.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"dpdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.11-5.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"dpdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.11-5.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"dpdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.11-5.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"dpdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.11-5.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"dpdk-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.11-5.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"dpdk-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.11-5.el8_2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-3.19.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"dpdk-thunderx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-3.19.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-3.19.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"dpdk-thunderx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-3.19.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-3.19.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"dpdk-thunderx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-3.19.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-3.19.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP1","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-4.6.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.11.1-0ubuntu1.1"}]}],"versions":["18.11.2-4","18.11.3-1","18.11.4-1","18.11.4-1ubuntu1","18.11.5-1","19.11-2ubuntu1","19.11-2ubuntu2","19.11.1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.11.9-0ubuntu18.04.2"}]}],"versions":["17.05.2-0ubuntu1","17.05.2-0ubuntu2","17.11-3","17.11-4","17.11-5","17.11.1-6","17.11.2-1ubuntu0.1","17.11.3-3~ubuntu0.18.04","17.11.5-0~ubuntu18.04.1","17.11.6-0~ubuntu18.04.1","17.11.8-0~ubuntu18.04.2","17.11.9-0ubuntu18.04.1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.11.1-0ubuntu1.1"}]}],"versions":["18.11.2-4","18.11.3-1","18.11.4-1","18.11.4-1ubuntu1","18.11.5-1","19.11-2ubuntu1","19.11-2ubuntu2","19.11.1-0ubuntu1"],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-lp151.3.4.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.11.8-2.7"}]}],"bundled":8}],"products":[{"vendor":"[unknown]","product":"dpdk"},{"vendor":"dpdk","product":"data_plane_development_kit"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"opensuse","product":"leap"},{"vendor":"oracle","product":"enterprise_communications_broker"}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00045.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRHKFVV4MRWNNJOYQOVP64L4UVWYPEO4/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://www.openwall.com/lists/oss-security/2020/05/18/2","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10725","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://bugs.dpdk.org/show_bug.cgi?id=270","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Vendor Advisory","fix","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10725","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HRHKFVV4MRWNNJOYQOVP64L4UVWYPEO4/"},{"url":"https://github.com/advisories/GHSA-rccg-5mcc-m2cf"},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-10725","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:2295","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1803082","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1824825","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828867","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828874","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828884","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828894","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828898","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2295.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10722","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10722","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10722","tags":["advisory"]},{"url":"https://bugs.dpdk.org/show_bug.cgi?id=267","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10723","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10723","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10723","tags":["advisory"]},{"url":"https://bugs.dpdk.org/show_bug.cgi?id=268","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10724","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10724","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10724","tags":["advisory"]},{"url":"https://bugs.dpdk.org/show_bug.cgi?id=269","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10725","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10725","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10726","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10726","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10726","tags":["advisory"]},{"url":"https://bugs.dpdk.org/show_bug.cgi?id=271","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4806","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801361","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1813252","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1824905","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1868708","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4806.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1239","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1239.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201334-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1171477","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10726","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201335-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-10725","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4362-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-10722","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-10723","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-10724","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-10726","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/662KDS7SYOF2U5AQLCDPYJDYUEUXXQWC/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14378","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-10725","description":"A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vhost-user backend application running on the host, which could result in a loss of connectivity for the other guests running on that host. This is caused by a missing validity check of the descriptor address in the function `virtio_dev_rx_batch_packed()`.","status":"published","published":"2020-05-20T13:16:55Z","modified":"2024-08-04T11:14:14.236Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-665"],"updated_at":"2026-11-02T14:35:47.877975Z"}],"euvd":[{"id":"EUVD-2020-3152","description":"A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vhost-user backend application running on the host, which could result in a loss of connectivity for the other guests running on that host. This is caused by a missing validity check of the descriptor address in the function `virtio_dev_rx_batch_packed()`.","status":"published","published":"2020-05-20T13:16:55Z","modified":"2024-08-04T11:14:14Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T03:07:49.454544Z"}],"ghsa":[{"id":"GHSA-rccg-5mcc-m2cf","title":"A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a...","description":"A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vhost-user backend application running on the host, which could result in a loss of connectivity for the other guests running on that host. This is caused by a missing validity check of the descriptor address in the function `virtio_dev_rx_batch_packed()`.","status":"published","published":"2022-05-24T17:18:10Z","modified":"2023-01-31T05:01:59Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-665"],"updated_at":"2026-11-02T14:48:10.613465Z"}],"nvd":[{"id":"CVE-2020-10725","description":"A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vhost-user backend application running on the host, which could result in a loss of connectivity for the other guests running on that host. This is caused by a missing validity check of the descriptor address in the function `virtio_dev_rx_batch_packed()`.","status":"published","published":"2020-05-20T14:15:11.063Z","modified":"2026-06-17T02:48:19.623Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-665"],"updated_at":"2026-11-02T14:06:00.784809Z"}],"osv":[{"id":"CVE-2020-10725","description":"A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vhost-user backend application running on the host, which could result in a loss of connectivity for the other guests running on that host. This is caused by a missing validity check of the descriptor address in the function `virtio_dev_rx_batch_packed()`.","status":"published","published":"2020-05-20T14:15:11.063Z","modified":"2026-10-24T10:30:42.316064424Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:13.492058Z"},{"id":"DEBIAN-CVE-2020-10725","description":"A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vhost-user backend application running on the host, which could result in a loss of connectivity for the other guests running on that host. This is caused by a missing validity check of the descriptor address in the function `virtio_dev_rx_batch_packed()`.","status":"published","published":"2020-05-20T14:15:11.063Z","modified":"2026-10-26T12:00:16.806359369Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:32.862554Z"},{"id":"RHSA-2020:2295","title":"Red Hat Security Advisory: openvswitch2.13 security, bug fix and enhancement update","status":"published","published":"2024-09-13T22:03:18Z","modified":"2026-06-29T10:30:29Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:4806","title":"Red Hat Security Advisory: dpdk security, bug fix, and enhancement update","status":"published","published":"2024-09-13T22:10:37Z","modified":"2026-06-29T10:32:43Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2021:1239","title":"Red Hat Security Advisory: dpdk security update","status":"published","published":"2024-09-13T22:13:09Z","modified":"2026-06-29T10:34:53Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"UBUNTU-CVE-2020-10725","description":"A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vhost-user backend application running on the host, which could result in a loss of connectivity for the other guests running on that host. This is caused by a missing validity check of the descriptor address in the function `virtio_dev_rx_batch_packed()`.","status":"published","published":"2020-05-18T15:00:00Z","modified":"2026-04-22T12:26:06.460204Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:22.212782Z"},{"id":"openSUSE-SU-2020:0693-1","title":"Security update for dpdk","description":"This update for dpdk fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171477).\n- CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171477).\n- CVE-2020-10724: Fixed a missing inputs validation in Vhost-crypto (bsc#1171477).\n- CVE-2020-10725: Fixed a segfault caused by invalid virtio descriptors sent from a malicious guest (bsc#1171477).\n- CVE-2020-10726: Fixed a denial-of-service caused by VHOST_USER_GET_INFLIGHT_FD message flooding (bsc#1171477).\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2020-05-22T16:18:48Z","modified":"2026-02-04T02:40:13.873222Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:10727-1","title":"dpdk-19.11.8-2.7 on GA media","description":"These are all security issues fixed in the dpdk-19.11.8-2.7 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:06:53.124695Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2020:1334-1","title":"Security update for dpdk","description":"This update for dpdk fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171477).\n- CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171477).\n- CVE-2020-10724: Fixed a missing inputs validation in Vhost-crypto (bsc#1171477).\n- CVE-2020-10725: Fixed a segfault caused by invalid virtio descriptors sent from a malicious guest (bsc#1171477).\n- CVE-2020-10726: Fixed a denial-of-service caused by VHOST_USER_GET_INFLIGHT_FD message flooding (bsc#1171477).\n","status":"published","published":"2020-05-19T11:19:55Z","modified":"2026-02-04T03:35:21.334652Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1335-1","title":"Security update for dpdk","description":"This update for dpdk fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171477).\n- CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171477).\n- CVE-2020-10724: Fixed a missing inputs validation in Vhost-crypto (bsc#1171477).\n- CVE-2020-10725: Fixed a segfault caused by invalid virtio descriptors sent from a malicious guest (bsc#1171477).\n- CVE-2020-10726: Fixed a denial-of-service caused by VHOST_USER_GET_INFLIGHT_FD message flooding (bsc#1171477).\n","status":"published","published":"2020-05-19T11:20:24Z","modified":"2026-02-04T03:40:46.883471Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"USN-4362-1","title":"dpdk vulnerabilities","description":"It was discovered that DPDK incorrectly handled certain inputs.\nAn attacker could possibly use this issue to cause a crash or\nexecute arbitrary code. (CVE-2020-10722, CVE-2020-10723,\nCVE-2020-10724, CVE-2020-10725, CVE-2020-10726)\n","status":"published","published":"2020-05-18T13:22:40Z","modified":"2026-04-22T10:04:13.930955Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}