Memory Corruption in DPDK Products by DPDK Vendor

CVE-2020-10723

What is CVE-2020-10723?

A memory corruption vulnerability exists in DPDK where an integer truncation occurs on the index of a payload. This flaw is primarily seen in DPDK versions 17.05 and later. Under specific conditions, a UInt index is improperly copied and truncated to a uint16, potentially allowing for out-of-bounds accesses, which can lead to memory corruption issues. This vulnerability may risk both system stability and security, necessitating immediate attention from users of the affected DPDK versions.

References