CVE:CVE-2020-10725
CNNVD:CNNVD-202005-858
DPDK是一款基于Linux平台的数据平面开发套件。该产品支持在多种CPU架构上执行数据包处理。
DPDK 19.11及之后版本中存在安全漏洞，该漏洞源于‘virtio_dev_rx_batch_packed()’函数没有对描述符地址进行有效性检查。攻击者可利用该漏洞造成连接中断。
solution:Upgrade dpdk data_plane_development_kit to a higher version than 19.11,and avoid the version (,19.11]; Upgrade fedoraproject fedora to a higher version than 32,and avoid the version 32; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade oracle enterprise_communications_broker to a higher version than 3.1.0,3.2.0,and avoid the version 3.1.0,3.2.0