Bug 1879473 (CVE-2020-14378) - CVE-2020-14378 dpdk: partial Denial of Service due to Integer Underflow
Summary: CVE-2020-14378 dpdk: partial Denial of Service due to Integer Underflow
Keywords:
Status: CLOSED NOTABUG
Alias: CVE-2020-14378
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 1883277 1910515
Blocks: 1879474
TreeView+ depends on / blocked
 
Reported: 2020-09-16 11:24 UTC by Dhananjay Arunesh
Modified: 2022-10-02 21:50 UTC (History)
24 users (show)

Fixed In Version: dpdk 18.11.10, dpdk 19.11.5
Doc Type: If docs needed, set a value
Doc Text:
An integer underflow flaw was found in the `move_desc` function that can lead to large amounts of CPU cycles being consumed in a long-running loop. This flaw allows an attacker to cause `move_desc` to get stuck in a 4,294,967,295-count iteration loop. Depending on how `vhost_crypto` is being used, this issue could prevent other VMs or network tasks from being serviced by the busy DPDK lcore for an extended period. The highest threat from this vulnerability is to system availability.
Clone Of:
Environment:
Last Closed: 2020-09-28 20:41:10 UTC
Embargoed:

Attachments (Terms of Use)

Description Dhananjay Arunesh 2020-09-16 11:24:07 UTC 
An integer underflow in the move_desc function can lead to many cpu cycles being eaten up in a long running loop. An attacker could cause move_desc to get stuck in a 4,294,967,295 iteration loop. Depending on how vhost_crypto is being used this could prevent other VMs or network tasks from being serviced by the busy DPDK lcore for an extended period.
Comment 8 Dave Baker 2020-09-28 15:52:36 UTC 
Statement:

This flaw does not affect the versions of `dpdk` as shipped with Red Hat Enterprise Linux 7 and 8 or the versions embedded in Red Hat Virtualization or the Fast Datapath `openvswitch` package, as they do not enable generic crypto device library support. This causes the vulnerable code in vhost_crypto.c to not be included.

This flaw does not affect Red Hat Ceph Storage 3 and 4 as dpdk (embedded in ceph source rpm) is not built in the packages, therefore the vulnerable code is not available in the resulting RPM and the issue cannot be exploited.
Comment 9 Dave Baker 2020-09-28 15:56:58 UTC 
Acknowledgments:

Name: Ryan Hall
Comment 10 Dave Baker 2020-09-28 15:57:00 UTC 
External References:

https://www.openwall.com/lists/oss-security/2020/09/28/3
Comment 11 Dave Baker 2020-09-28 15:57:27 UTC 
Created dpdk tracking bugs for this issue:

Affects: fedora-all [bug 1883277]
Comment 12 Product Security DevOps Team 2020-09-28 20:41:10 UTC 
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2020-14378
Note You need to log in before you can comment on or make changes to this bug.