Search/CVE-2020-10722

● CVE — Medium

CVE-2020-10722

Vendorfedoraproject, canonical, opensuse, oracle, dpdkProductfedora, ubuntu linux, leap, communications session border controller, enterprise communications broker, data plane development kitDiscoveredMay 19, 2020UpdatedNov 21, 2024

A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.

View graph Watch Export

CVSS v3.1

5.1 MEDIUM

EPSS

0.38%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

0

sources referencing this CVE

Related IOCs

0

seen in the same coverage

CVSS v3.1 Detail

Attack VectorLOCAL

Attack ComplexityLOW

Privileges RequiredHIGH

User InteractionNONE

ScopeUNCHANGED

ConfidentialityNONE

IntegrityLOW

AvailabilityHIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H

Connections

7 relationships

communications session border controller

enterprise communications broker

data plane development kit

Timeline

disclosure → media coverage

May 19, 2020

Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024