CVE:CVE-2020-10724
CNNVD:CNNVD-202005-859
DPDK是一款基于Linux平台的数据平面开发套件。该产品支持在多种CPU架构上执行数据包处理。
DPDK 18.11及之后版本中的vhost-crypto库存在缓冲区错误漏洞，该漏洞源于程序没有验证用户提交的值。攻击者可利用该漏洞获取信息。
solution:Upgrade dpdk data_plane_development_kit to a higher version than 18.11,and avoid the version (,18.11]; Upgrade canonical ubuntu_linux to a higher version than 18.04,19.10,20.04,and avoid the version 18.04,19.10,20.04; Upgrade fedoraproject fedora to a higher version than 32,and avoid the version 32