CVE-2020-14377

Name of the Vulnerable Software and Affected Versions dpdk versions prior to 18.11.10 dpdk versions prior to 19.11.5

Description A flaw in dpdk allows an attacker to read significant amounts of host memory due to a lack of validation of attacker-controlled parameters, leading to a buffer over read. The results of the over read are then written back to the guest virtual machine memory, posing a threat to data confidentiality and system availability.

Recommendations For versions prior to 18.11.10, update to version 18.11.10 or later. For versions prior to 19.11.5, update to version 19.11.5 or later.