Vulnetix
Try Vulnetix Request Demo
CVE-2019-14818 PUBLISHED

A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhost_user socket, can send specially crafted VRING_SET_NUM messages, resulting in a memory leak including file descriptors. This flaw could lead to a denial of service condition.

EPSS 1.14% · 78.3th percentile

Risk Scores

EPSS Score
1.14%
78.3th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSdpdk0, 2.0.0-0ubuntu1, 2.0.0-0ubuntu2
Ubuntu:18.04:LTSdpdk0, 17.05.2-0ubuntu1, 17.05.2-0ubuntu2

Timeline

References

Open in Interactive Console →