CVE-2020-14378CWE-191

An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc` function can lead to large amounts of CPU cycles being eaten up in…

published September 30, 2020

CVSS
—
EPSS
0%
Percentile
32.7
In the wild
Unconfirmed
What it is

An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc` function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause `move_desc` to get stuck in a 4,294,967,295-count iteration loop. Depending on how `vhost_crypto` is being used this could prevent other VMs or network tasks from being serviced by the busy DPDK lcore for an extended period.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00397 · 32.7th percentile
Weakness
CWE-191 · Integer Underflow (Wrap or Wraparound)
Published
2020-09-30T00:00Z
EPSS history
Timeline
  • 30 SEP 00:00Z
    An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc` function can lead to large amounts of CPU cycles being eaten up in…
    cvelistv5