A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A flawed bounds checking in the copydata function leads to a buffer overflow allowing an attacker in a virtual machine to write arbitrary data to any address in the vhostcrypto application. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending a crafted Vhost header to DPDK.

A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A lack of bounds checking when copying ivdata from the VM guest memory into host memory can lead to a large buffer overflow. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. Virtio ring descriptors, and the data they describe are in a region of memory accessible by from both the virtual machine and the host. An attacker in a VM can change the contents of the memory after vhostcrypto has validated it. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

A flaw was found in the vhost library in DPDK. Function vhostusersetinflightfd() does not validate msg->payload.inflight.numqueues, possibly causing out-of-bounds memory read/write. Any software using DPDK vhost library may crash as a result of this vulnerability.

A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhostuser socket, can send specially crafted VRINGSETNUM messages, resulting in a memory leak including file descriptors. This flaw could lead to a denial of service condition.

A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A complete lack of validation of attacker-controlled parameters can lead to a buffer over read. The results of the over read are then written back to the guest virtual machine memory. This vulnerability can be used by an attacker in a virtual machine to read significant amounts of host memory. The highest threat from this vulnerability is to data confidentiality and system availability.

A vulnerability was fixed in DPDK.

Some downstream stakeholders were warned in advance through security-prerelease () dpdk org in order to coordinate the release of fixes and reduce the vulnerability window [0].

A malicious guest using a virtio driver can cause the vhost-user side to crash by sending a packet with a Tx checksum offload request and an invalid csumstart offset.

Commits per branch: LTS Releases: 24.11 - https://fast.dpdk.org/rel/dpdk-24.11.1.tar.xz 23.11 - https://fast.dpdk.org/rel/dpdk-23.11.3.tar.xz 22.11 - https://fast.dpdk.org/rel/dpdk-22.11.7.tar.xz 21.11 - https://fast.dpdk.org/rel/dpdk-21.11.9.tar.xz

CVE: CVE-2024-11614 Severity: 7.2 CVSS scores: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:F/RC:C

[0]: https://mails.dpdk.org/listinfo/security-prerelease