{"id":"CVE-2020-10726","aliases":["DEBIAN-CVE-2020-10726","EUVD-2020-3153","GHSA-whmr-hj5c-pm9g","RHSA-2020:2295","RHSA-2020:4806","SUSE-SU-2020:1334-1","SUSE-SU-2020:1335-1","UBUNTU-CVE-2020-10726","USN-4362-1","openSUSE-SU-2020:0693-1"],"status":"published","title":"A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct...","description":"A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct access to the vhost-user socket can keep sending VHOST_USER_GET_INFLIGHT_FD messages, causing a resource leak (file descriptors and virtual memory), which may result in a denial of service.","severity":{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00473,"percentile":0.41362,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2020-05-18T13:22:40Z","modified":"2026-10-26T12:00:04Z","fixes":[{"ecosystem":"Debian:12","package":"dpdk","fixed_in":["19.11.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"dpdk","fixed_in":["19.11.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"dpdk","fixed_in":["19.11.2-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"dpdk","fixed_in":["19.11.1-0ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.11.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.11.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.11.2-1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"network-scripts-openvswitch2.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-25.el8fdp.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-25.el8fdp.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-25.el8fdp.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-25.el8fdp.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-25.el8fdp.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"openvswitch2.13-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-25.el8fdp.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"python3-openvswitch2.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-25.el8fdp.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::fastdatapath","package":"python3-openvswitch2.13-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13.0-25.el8fdp.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.11.3-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dpdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.11.3-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dpdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.11.3-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dpdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.11.3-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dpdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.11.3-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dpdk-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.11.3-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dpdk-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.11.3-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-3.19.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"dpdk-thunderx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-3.19.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-3.19.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"dpdk-thunderx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-3.19.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-3.19.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"dpdk-thunderx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-3.19.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-3.19.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP1","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-4.6.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.11.1-0ubuntu1.1"}]}],"versions":["18.11.2-4","18.11.3-1","18.11.4-1","18.11.4-1ubuntu1","18.11.5-1","19.11-2ubuntu1","19.11-2ubuntu2","19.11.1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.11.9-0ubuntu18.04.2"}]}],"versions":["17.05.2-0ubuntu1","17.05.2-0ubuntu2","17.11-3","17.11-4","17.11-5","17.11.1-6","17.11.2-1ubuntu0.1","17.11.3-3~ubuntu0.18.04","17.11.5-0~ubuntu18.04.1","17.11.6-0~ubuntu18.04.1","17.11.8-0~ubuntu18.04.2","17.11.9-0ubuntu18.04.1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.11.1-0ubuntu1.1"}]}],"versions":["18.11.2-4","18.11.3-1","18.11.4-1","18.11.4-1ubuntu1","18.11.5-1","19.11-2ubuntu1","19.11-2ubuntu2","19.11.1-0ubuntu1"],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"dpdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.3-lp151.3.4.1"}]}],"bundled":5}],"products":[{"vendor":"[unknown]","product":"dpdk"},{"vendor":"dpdk","product":"data_plane_development_kit"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"opensuse","product":"leap"},{"vendor":"oracle","product":"enterprise_communications_broker"}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00045.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRHKFVV4MRWNNJOYQOVP64L4UVWYPEO4/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://www.openwall.com/lists/oss-security/2020/05/18/2","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10726","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://bugs.dpdk.org/show_bug.cgi?id=271","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Vendor Advisory","fix","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10726","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HRHKFVV4MRWNNJOYQOVP64L4UVWYPEO4/"},{"url":"https://github.com/advisories/GHSA-whmr-hj5c-pm9g"},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-10726","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:2295","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1803082","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1824825","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828867","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828874","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828884","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828894","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828898","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2295.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10722","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10722","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10722","tags":["advisory"]},{"url":"https://bugs.dpdk.org/show_bug.cgi?id=267","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10723","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10723","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10723","tags":["advisory"]},{"url":"https://bugs.dpdk.org/show_bug.cgi?id=268","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10724","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10724","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10724","tags":["advisory"]},{"url":"https://bugs.dpdk.org/show_bug.cgi?id=269","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10725","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10725","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10725","tags":["advisory"]},{"url":"https://bugs.dpdk.org/show_bug.cgi?id=270","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10726","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10726","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4806","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801361","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1813252","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1824905","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1868708","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4806.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201334-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1171477","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10726","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201335-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-10726","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4362-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-10722","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-10723","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-10724","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-10725","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/662KDS7SYOF2U5AQLCDPYJDYUEUXXQWC/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-10726","description":"A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct access to the vhost-user socket can keep sending VHOST_USER_GET_INFLIGHT_FD messages, causing a resource leak (file descriptors and virtual memory), which may result in a denial of service.","status":"published","published":"2020-05-20T13:04:47Z","modified":"2024-08-04T11:14:15.435Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:35:47.877975Z"}],"euvd":[{"id":"EUVD-2020-3153","description":"A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct access to the vhost-user socket can keep sending VHOST_USER_GET_INFLIGHT_FD messages, causing a resource leak (file descriptors and virtual memory), which may result in a denial of service.","status":"published","published":"2020-05-20T13:04:47Z","modified":"2024-08-04T11:14:15Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T03:07:49.454544Z"}],"ghsa":[{"id":"GHSA-whmr-hj5c-pm9g","title":"A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct...","description":"A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct access to the vhost-user socket can keep sending VHOST_USER_GET_INFLIGHT_FD messages, causing a resource leak (file descriptors and virtual memory), which may result in a denial of service.","status":"published","published":"2022-05-24T17:18:10Z","modified":"2023-01-31T05:02:09Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:48:12.466034Z"}],"nvd":[{"id":"CVE-2020-10726","description":"A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct access to the vhost-user socket can keep sending VHOST_USER_GET_INFLIGHT_FD messages, causing a resource leak (file descriptors and virtual memory), which may result in a denial of service.","status":"published","published":"2020-05-20T14:15:11.157Z","modified":"2026-06-17T02:48:19.757Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:06:00.784809Z"}],"osv":[{"id":"CVE-2020-10726","description":"A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct access to the vhost-user socket can keep sending VHOST_USER_GET_INFLIGHT_FD messages, causing a resource leak (file descriptors and virtual memory), which may result in a denial of service.","status":"published","published":"2020-05-20T14:15:11.157Z","modified":"2026-10-24T10:30:16.409186613Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:13.492058Z"},{"id":"DEBIAN-CVE-2020-10726","description":"A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct access to the vhost-user socket can keep sending VHOST_USER_GET_INFLIGHT_FD messages, causing a resource leak (file descriptors and virtual memory), which may result in a denial of service.","status":"published","published":"2020-05-20T14:15:11.157Z","modified":"2026-10-26T12:00:04.42218977Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:32.862554Z"},{"id":"RHSA-2020:2295","title":"Red Hat Security Advisory: openvswitch2.13 security, bug fix and enhancement update","status":"published","published":"2024-09-13T22:03:18Z","modified":"2026-06-29T10:30:29Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:4806","title":"Red Hat Security Advisory: dpdk security, bug fix, and enhancement update","status":"published","published":"2024-09-13T22:10:37Z","modified":"2026-06-29T10:32:43Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"UBUNTU-CVE-2020-10726","description":"A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct access to the vhost-user socket can keep sending VHOST_USER_GET_INFLIGHT_FD messages, causing a resource leak (file descriptors and virtual memory), which may result in a denial of service.","status":"published","published":"2020-05-18T15:00:00Z","modified":"2026-04-22T12:25:49.568923Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:22.212782Z"},{"id":"openSUSE-SU-2020:0693-1","title":"Security update for dpdk","description":"This update for dpdk fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171477).\n- CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171477).\n- CVE-2020-10724: Fixed a missing inputs validation in Vhost-crypto (bsc#1171477).\n- CVE-2020-10725: Fixed a segfault caused by invalid virtio descriptors sent from a malicious guest (bsc#1171477).\n- CVE-2020-10726: Fixed a denial-of-service caused by VHOST_USER_GET_INFLIGHT_FD message flooding (bsc#1171477).\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2020-05-22T16:18:48Z","modified":"2026-02-04T02:40:13.873222Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"SUSE-SU-2020:1334-1","title":"Security update for dpdk","description":"This update for dpdk fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171477).\n- CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171477).\n- CVE-2020-10724: Fixed a missing inputs validation in Vhost-crypto (bsc#1171477).\n- CVE-2020-10725: Fixed a segfault caused by invalid virtio descriptors sent from a malicious guest (bsc#1171477).\n- CVE-2020-10726: Fixed a denial-of-service caused by VHOST_USER_GET_INFLIGHT_FD message flooding (bsc#1171477).\n","status":"published","published":"2020-05-19T11:19:55Z","modified":"2026-02-04T03:35:21.334652Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1335-1","title":"Security update for dpdk","description":"This update for dpdk fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171477).\n- CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171477).\n- CVE-2020-10724: Fixed a missing inputs validation in Vhost-crypto (bsc#1171477).\n- CVE-2020-10725: Fixed a segfault caused by invalid virtio descriptors sent from a malicious guest (bsc#1171477).\n- CVE-2020-10726: Fixed a denial-of-service caused by VHOST_USER_GET_INFLIGHT_FD message flooding (bsc#1171477).\n","status":"published","published":"2020-05-19T11:20:24Z","modified":"2026-02-04T03:40:46.883471Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"USN-4362-1","title":"dpdk vulnerabilities","description":"It was discovered that DPDK incorrectly handled certain inputs.\nAn attacker could possibly use this issue to cause a crash or\nexecute arbitrary code. (CVE-2020-10722, CVE-2020-10723,\nCVE-2020-10724, CVE-2020-10725, CVE-2020-10726)\n","status":"published","published":"2020-05-18T13:22:40Z","modified":"2026-04-22T10:04:13.930955Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}