CVE-2020-14378

2020-09-3000:00:00

CWE-191

redhat

www.cve.org

5.9 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.4%

JSON

An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the move_desc function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause move_desc to get stuck in a 4,294,967,295-count iteration loop. Depending on how vhost_crypto is being used this could prevent other VMs or network tasks from being serviced by the busy DPDK lcore for an extended period.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "dpdk",
    "versions": [
      {
        "version": "All dpdk versions before 18.11.10 and before 19.11.5",
        "status": "affected"
      }
    ]
  }
]