Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2019-14818

EPSS 1.14% · P79
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2019-14818

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhost_user socket, can send specially crafted VRING_SET_NUM messages, resulting in a memory leak including file descriptors. This flaw could lead to a denial of service condition.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
在移除最后引用时对内存的释放不恰当(内存泄露)
Source: NVD (National Vulnerability Database)
Vulnerability Title
DPDK 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
DPDK是一款基于Linux平台的数据平面开发套件。该产品支持在多种CPU架构上执行数据包处理。 DPDK中存在安全漏洞。攻击者可通过发送特制的VRING_SET_NUM消息利用该漏洞造成内存泄露（包括：文件描述符），导致拒绝服务。以下产品及版本受到影响：DPDK 17.11.8之前的17.x.x版本，16.11.10之前的16.x.x版本，18.11.4之前的18.x.x版本，19.08.1之前的19.x.x版本。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
DPDKdpdk all dpdk version 17.x.x before 17.11.8 -

II. Public POCs for CVE-2019-14818

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2019-14818

请登录查看更多情报信息。

IV. Related Vulnerabilities

Same product: dpdk
Same weakness: CWE-401

V. Comments for CVE-2019-14818

No comments yet

Leave a comment