CVE-2020-10722: Integer Overflow
A vulnerability was found in DPDK through version 18.11, vhostusersetlogbase() is a message handler that is called to handle the VHOSTUSERSETLOGBASE message. Its payload contains a 64 bit size and offset. Both are added up and used as a size when calling mmap(). There is no integer overflow check. If an integer overflow occurs a smaller memory map would be created than requested. Since the returned mapping is mapped as writable and used for logging, it seems highly likely that memory corruption can occur.
Other sources
A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhostusersetlogbase() could result in a smaller memory map than requested, possibly allowing memory corruption.
— Ubuntu
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2020-10722.
What is the severity level of CVE-2020-10722?
CVE-2020-10722 has a severity level of medium.
Which versions of DPDK are affected by CVE-2020-10722?
DPDK versions 18.05 and above are affected by CVE-2020-10722.
How can CVE-2020-10722 be fixed?
Update DPDK to version 20.02.1, 19.11.2, or 18.11.8 to fix CVE-2020-10722.
Are there any references for CVE-2020-10722?
Yes, you can find references for CVE-2020-10722 at the following links: [http://git.dpdk.org/dpdk/commit/?id=fbc4d248b198db7f720fe31a47050a406632cc7a](http://git.dpdk.org/dpdk/commit/?id=fbc4d248b198db7f720fe31a47050a406632cc7a), [https://www.openwall.com/lists/oss-security/2020/05/18/2](https://www.openwall.com/lists/oss-security/2020/05/18/2), [https://bugs.dpdk.org/show_bug.cgi?id=267](https://bugs.dpdk.org/show_bug.cgi?id=267).