TI-2020-08624 Aliases CVE-2020-10725 GHSA-rccg-5mcc-m2cf

A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a…

LOW 38CWE-665Published 2020-05-20 · Updated 2024-08-04

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · None · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.

Summary

A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vhost-user backend application running on the host, which could result in a loss of connectivity for the other guests running on that host. This is caused by a missing validity check of the descriptor address in the function `virtio_dev_rx_batch_packed()`.

Why it matters now

EPSS 0.02213 82nd percentileScored 2026-11-07

Fix Fixed Red Hat: 3 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
[UNKNOWN]	dpdk	20.02.1; 19.11.2	—	No fix listed	CNA

dpdk Vendor[UNKNOWN] Affected 20.02.1; 19.11.2 Fixed in — No fix listed CNA

CPE configurations NVD · 5

CPE	Versions	Role	Vendor
cpe:2.3:a:dpdk:data_plane_development_kit::::::::	up to 19.11	Vulnerable	DPDK
cpe:2.3:o:fedoraproject:fedora:32:::::::*	32	Vulnerable	Fedoraproject
cpe:2.3:o:opensuse:leap:15.1:::::::*	15.1	Vulnerable	openSUSE
cpe:2.3:a:oracle:enterprise_communications_broker:3.1.0:::::::*	3.1.0	Vulnerable	Oracle
cpe:2.3:a:oracle:enterprise_communications_broker:3.2.0:::::::*	3.2.0	Vulnerable	Oracle

cpe:2.3:a:dpdk:data_plane_development_kit:*:*:*:*:*:*:*:* Versions up to 19.11 Vulnerable ·DPDK
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:* Versions 32 Vulnerable ·Fedoraproject
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* Versions 15.1 Vulnerable ·openSUSE
cpe:2.3:a:oracle:enterprise_communications_broker:3.1.0:*:*:*:*:*:*:* Versions 3.1.0 Vulnerable ·Oracle
cpe:2.3:a:oracle:enterprise_communications_broker:3.2.0:*:*:*:*:*:*:* Versions 3.2.0 Vulnerable ·Oracle

Remediation

Red Hat 3 advisories

RHSA-2021:1239 Released 2021-04-19 · Red Hat rating Important
dpdk security update
- Red Hat Enterprise Linux AppStream EUS (v. 8.2) dpdk-19.11-5.el8_2, dpdk-devel-19.11-5.el8_2, dpdk-doc-19.11-5.el8_2 +1
RHSA-2020:4806 Released 2020-11-04 · Red Hat rating Important
dpdk security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream (v. 8) dpdk-19.11.3-1.el8, dpdk-devel-19.11.3-1.el8, dpdk-doc-19.11.3-1.el8 +1
RHSA-2020:2295 Released 2020-05-26 · Red Hat rating Important
openvswitch2.13 security, bug fix and enhancement update
- Fast Datapath for Red Hat Enterprise Linux 8 network-scripts-openvswitch2.13-2.13.0-25.el8fdp.1, openvswitch2.13-2.13.0-25.el8fdp.1, openvswitch2.13-devel-2.13.0-25.el8fdp.1 +2

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

Advisory · 2020-05-19
[UNKNOWN] dpdk — openSUSE-SU-2020:0693
5 records Highest priority Priority LOW 5 LOW
Other records, highest priority first
- TI-2020-08622 Integer overflow in [UNKNOWN] dpdkPriority LOW 30
- TI-2020-08621 Integer overflow in [UNKNOWN] dpdkPriority LOW 30
- TI-2020-08625 Integer overflow in [UNKNOWN] dpdkPriority LOW 27
Show all 5 records → Advisory →
Advisory · 2020-05-19
[UNKNOWN] dpdk — FEDORA-2020-04e3d34451
5 records Highest priority Priority LOW 5 LOW
Other records, highest priority first
- TI-2020-08622 Integer overflow in [UNKNOWN] dpdkPriority LOW 30
- TI-2020-08621 Integer overflow in [UNKNOWN] dpdkPriority LOW 30
- TI-2020-08625 Integer overflow in [UNKNOWN] dpdkPriority LOW 27
Show all 5 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

Product	Status	Plan or fix
Fast Datapath for Red Hat Enterprise Linux 8	Fixed	RHSA-2020:2295
Red Hat Enterprise Linux AppStream (v. 8)	Fixed	RHSA-2020:4806
Red Hat Enterprise Linux AppStream EUS (v. 8.2)	Fixed	RHSA-2021:1239

Not affected: 10 products

Fast Datapath for RHEL 7
Fast Datapath for RHEL 8
Red Hat Ceph Storage 3
Red Hat Ceph Storage 4
Red Hat Enterprise Linux 7
Red Hat OpenStack Platform 10 (Newton)
Red Hat OpenStack Platform 13 (Queens)
Red Hat OpenStack Platform 15 (Stein)
Red Hat OpenStack Platform 16 (Train)
Red Hat Virtualization 4

Timeline

2026-10-02 Threatist record created from CVE-2020-10725
2026-10-03 Alias added: GHSA-rccg-5mcc-m2cf

References

Patch 2

Advisory 4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences