Lucene search

K
osvGoogleOSV:CVE-2020-10725
HistoryMay 20, 2020 - 2:15 p.m.

CVE-2020-10725

2020-05-2014:15:11
Google
osv.dev
6

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

49.1%

A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vhost-user backend application running on the host, which could result in a loss of connectivity for the other guests running on that host. This is caused by a missing validity check of the descriptor address in the function virtio_dev_rx_batch_packed().