CVE-2020-10725

HighCVSS 7.7/10Last modified Jun 17, 2026

Description

A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vhost-user backend application running on the host, which could result in a loss of connectivity for the other guests running on that host. This is caused by a missing validity check of the descriptor address in the function `virtio_dev_rx_batch_packed()`.

Metrics

CVSS 3.1 7.7/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Weakness enumeration

CWE-665

Affected software

Vendor	Product	Versions
[UNKNOWN]	dpdk	20.02.1; 19.11.2

References

http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00045.htmlMailing List, Third Party Advisory
https://bugs.dpdk.org/show_bug.cgi?id=270Issue Tracking, Patch, Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10725Issue Tracking, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRHKFVV4MRWNNJOYQOVP64L4UVWYPEO4/
https://www.openwall.com/lists/oss-security/2020/05/18/2Mailing List, Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2021.htmlPatch, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00045.htmlMailing List, Third Party Advisory
https://bugs.dpdk.org/show_bug.cgi?id=270Issue Tracking, Patch, Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10725Issue Tracking, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRHKFVV4MRWNNJOYQOVP64L4UVWYPEO4/
https://www.openwall.com/lists/oss-security/2020/05/18/2Mailing List, Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2021.htmlPatch, Third Party Advisory

Timeline

Published: May 20, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-107264.4A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct access to the vhost-user socket can keep s CVE-2020-107275.5A flaw was found in ActiveMQ Artemis management API from version 2.7.0 up until 2.12.0, where a user inadvertently stores passwords in plain CVE-2020-107287.8A flaw was found in automationbroker/apb container in versions up to and including 2.0.4-1. This container grants all users sudoer permissio CVE-2020-107295.5A flaw was found in the use of insufficiently random values in Ansible. Two random password lookups of the same length generate the equal va CVE-2020-10738.1A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin CVE-2020-107306.5A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and CVE-2020-107319.9A flaw was found in the nova_libvirt container provided by the Red Hat OpenStack Platform 16, where it does not have SELinux enabled. This f CVE-2020-107324.4A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a CVE-2020-107337.3The Windows installer for PostgreSQL 9.5 - 12 invokes system-provided executables that do not have fully-qualified paths. Executables in the CVE-2020-107343.3A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection. Versions shipped with Red Hat CVE-2020-107357.5A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take CVE-2020-107368.0An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not proper