CVE-2020-10722: Integer Overflow
A vulnerability was found in DPDK through version 18.11, vhostusersetlogbase() is a message handler that is called to handle the VHOSTUSERSETLOGBASE message. Its payload contains a 64 bit size and offset. Both are added up and used as a size when calling mmap(). There is no integer overflow check. If an integer overflow occurs a smaller memory map would be created than requested. Since the returned mapping is mapped as writable and used for logging, it seems highly likely that memory corruption can occur.
Other sources
A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhostusersetlogbase() could result in a smaller memory map than requested, possibly allowing memory corruption.
— Ubuntu
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/openvswitch2.11to a version that resolves this vulnerability.Fixed in 0:2.11.0-54.20200327gita4efc59.el7fd - Upgrade
Upgrade
redhat/openvswitchto a version that resolves this vulnerability.Fixed in 0:2.9.0-130.el7fd - Upgrade
Upgrade
redhat/openvswitch2.13to a version that resolves this vulnerability.Fixed in 0:2.13.0-25.el8fd - Upgrade
Upgrade
redhat/openvswitch2.11to a version that resolves this vulnerability.Fixed in 0:2.11.0-54.20200327gita4efc59.el8fd - Upgrade
Upgrade
redhat/dpdkto a version that resolves this vulnerability.Fixed in 0:18.11.8-1.el7_8 - Upgrade
Upgrade
redhat/dpdkto a version that resolves this vulnerability.Fixed in 0:19.11.3-1.el8 - Upgrade
Upgrade
redhat/openvswitch2.11to a version that resolves this vulnerability.Fixed in 0:2.11.3-77.el7fd - Upgrade
Upgrade
redhat/openvswitch-selinux-extra-policyto a version that resolves this vulnerability.Fixed in 0:1.0-17.el7fd - Upgrade
Upgrade
redhat/ovn2.11to a version that resolves this vulnerability.Fixed in 0:2.11.1-57.el7fd - Upgrade
Upgrade
redhat/ovn2.11to a version that resolves this vulnerability.Fixed in 0:2.11.1-44.el7fd - Upgrade
Upgrade
redhat/dpdkto a version that resolves this vulnerability.Fixed in 20.02.1 - Upgrade
Upgrade
redhat/dpdkto a version that resolves this vulnerability.Fixed in 19.11.2 - Upgrade
Upgrade
redhat/dpdkto a version that resolves this vulnerability.Fixed in 18.11.8 - Upgrade
Upgrade
debian/dpdkto a version that resolves this vulnerability.Fixed in 22.11.11-0+deb12u1Fixed in 22.11.7-1~deb12u1Fixed in 24.11.4-0+deb13u1Fixed in 24.11.8-0+deb13u1Fixed in 25.11.4-1 - Upgrade
Upgrade
alpine/openvswitchto a version that resolves this vulnerability.Fixed in 2.12.1-r0
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2020-10722.
What is the severity level of CVE-2020-10722?
CVE-2020-10722 has a severity level of medium.
Which versions of DPDK are affected by CVE-2020-10722?
DPDK versions 18.05 and above are affected by CVE-2020-10722.
How can CVE-2020-10722 be fixed?
Update DPDK to version 20.02.1, 19.11.2, or 18.11.8 to fix CVE-2020-10722.
Are there any references for CVE-2020-10722?
Yes, you can find references for CVE-2020-10722 at the following links: [http://git.dpdk.org/dpdk/commit/?id=fbc4d248b198db7f720fe31a47050a406632cc7a](http://git.dpdk.org/dpdk/commit/?id=fbc4d248b198db7f720fe31a47050a406632cc7a), [https://www.openwall.com/lists/oss-security/2020/05/18/2](https://www.openwall.com/lists/oss-security/2020/05/18/2), [https://bugs.dpdk.org/show_bug.cgi?id=267](https://bugs.dpdk.org/show_bug.cgi?id=267).