Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library (dpdk)

CVE-2024-11614
HIGH 7.4

At a glance

Source
NVD
EPSS
EPSS 0.56 % · percentile 47 ()
State
PUBLISHED
Published
Updated
Assigner
redhat
NVD status
Deferred

Search on…

Description

An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature. This issue enables an untrusted or compromised guest to crash the hypervisor's vSwitch by forging Virtio descriptors to cause out-of-bounds reads. This flaw allows an attacker with a malicious VM using a virtio driver to cause the vhost-user side to crash by sending a packet with a Tx checksum offload request and an invalid csum_start offset.

Weaknesses (CWE)

References

Scores

VersionScoreVectorScored by
CVSS 3.0HIGH 7.4CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Hredhat
CVSS 3.0HIGH 7.4CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HNVD · secalert@redhat.com (Secondary)

European references

Affected products

ProductVersions
dpdkaffected 21.05 < 21.11-4
Red Hat · Fast Datapath for Red Hat Enterprise Linux 8unaffected 0:3.1.0-159.el8fdp < *
Red Hat · Fast Datapath for Red Hat Enterprise Linux 9unaffected 0:3.1.0-149.el9fdp < *
Red Hat · Fast Datapath for Red Hat Enterprise Linux 9unaffected 0:3.3.0-92.el9fdp < *
Red Hat · Fast Datapath for Red Hat Enterprise Linux 9unaffected 0:3.4.0-48.el9fdp < *
Red Hat · Red Hat Enterprise Linux 8unaffected 0:23.11-2.el8_10 < *
Red Hat · Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportunaffected 0:21.11-3.el8_6 < *
Red Hat · Red Hat Enterprise Linux 8.6 Telecommunications Update Serviceunaffected 0:21.11-3.el8_6 < *
Red Hat · Red Hat Enterprise Linux 8.6 Update Services for SAP Solutionsunaffected 0:21.11-3.el8_6 < *
Red Hat · Red Hat Enterprise Linux 8.8 Extended Update Supportunaffected 0:21.11-4.el8_8 < *
Red Hat · Red Hat Enterprise Linux 9unaffected 2:23.11-2.el9_5 < *
Red Hat · Red Hat Enterprise Linux 9.0 Update Services for SAP Solutionsunaffected 2:21.11-3.el9_0 < *
Red Hat · Red Hat Enterprise Linux 9.2 Extended Update Supportunaffected 2:22.11-4.el9_2 < *
Red Hat · Red Hat Enterprise Linux 9.4 Extended Update Supportunaffected 2:23.11-2.el9_4 < *
Red Hat · Fast Datapath for RHEL 7
Red Hat · Fast Datapath for RHEL 7
Red Hat · Fast Datapath for RHEL 7
Red Hat · Fast Datapath for RHEL 7
Red Hat · Fast Datapath for RHEL 7
Red Hat · Fast Datapath for RHEL 8

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD