Published: 14/11/2019 Updated: 07/11/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

A flaw was found in all dpdk version 17.x.x prior to 17.11.8, 16.x.x prior to 16.11.10, 18.x.x prior to 18.11.4 and 19.x.x prior to 19.08.1 where a malicious master, or a container with access to vhost_user socket, can send specially crafted VRING_SET_NUM messages, resulting in a memory leak including file descriptors. This flaw could lead to a denial of service condition.

Vulnerable Product	Search on Vulmon	Subscribe to Product
dpdk data plane development kit
redhat enterprise linux fast datapath 7.0
redhat openstack 10
redhat enterprise linux fast datapath 8.0
redhat virtualization eus 4.2
fedoraproject fedora 31

DPDK could be made to consume resources if it received specially crafted input ...

It was discovered that the vhost PMD in DPDK, a set of libraries for fast packet processing, was affected by memory and file descriptor leaks which could result in denial of service For the oldstable distribution (stretch), this problem has been fixed in version 16119-1+deb9u2 For the stable distribution (buster), this problem has been fixed in ...

Synopsis Moderate: dpdk security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for dpdk is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System ( ...

Synopsis Moderate: openvswitch211 security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for openvswitch211 is now available for Fast Datapath for RHEL 8Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring Sy ...

Synopsis Moderate: dpdk security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for dpdk is now available for Red Hat Enterprise Linux 7 ExtrasRed Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring S ...

Synopsis Moderate: openvswitch211 security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for openvswitch211 is now available for Fast Datapath for RHEL 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring Sy ...

Synopsis Moderate: openvswitch212 security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for openvswitch212 is now available for Fast Datapath for RHEL 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring Sy ...

Synopsis Moderate: openvswitch212 security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for openvswitch212 is now available for Fast Datapath for RHEL 8Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring Sy ...

Synopsis Moderate: openvswitch security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for openvswitch is now available for Fast Datapath for RHEL 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CV ...

CWE-401 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14818 https://bugs.dpdk.org/show_bug.cgi?id=363 https://access.redhat.com/errata/RHSA-2020:0165 https://access.redhat.com/errata/RHSA-2020:0166 https://access.redhat.com/errata/RHSA-2020:0168 https://access.redhat.com/errata/RHSA-2020:0171 https://access.redhat.com/errata/RHSA-2020:0172 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ULJ3C7OVBOEVDGSHYC3VCLSUHANGTFFP/https://usn.ubuntu.com/4189-1/https://nvd.nist.gov

Get Started

CVE-2019-14818

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect