CVE-2019-14818

A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhost_user socket, can send specially crafted VRING_SET_NUM messages, resulting in a memory leak including file descriptors. This flaw could lead to a denial of service condition.

• CWE-401
• CWE-401

• https://access.redhat.com/errata/RHSA-2020:0165Third Party Advisory
• https://access.redhat.com/errata/RHSA-2020:0166Third Party Advisory
• https://access.redhat.com/errata/RHSA-2020:0168Third Party Advisory
• https://access.redhat.com/errata/RHSA-2020:0171Third Party Advisory
• https://access.redhat.com/errata/RHSA-2020:0172Third Party Advisory
• https://bugs.dpdk.org/show_bug.cgi?id=363Issue Tracking, Patch, Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14818Issue Tracking, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ULJ3C7OVBOEVDGSHYC3VCLSUHANGTFFP/
• https://access.redhat.com/errata/RHSA-2020:0165Third Party Advisory
• https://access.redhat.com/errata/RHSA-2020:0166Third Party Advisory
• https://access.redhat.com/errata/RHSA-2020:0168Third Party Advisory
• https://access.redhat.com/errata/RHSA-2020:0171Third Party Advisory
• https://access.redhat.com/errata/RHSA-2020:0172Third Party Advisory
• https://bugs.dpdk.org/show_bug.cgi?id=363Issue Tracking, Patch, Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14818Issue Tracking, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ULJ3C7OVBOEVDGSHYC3VCLSUHANGTFFP/

Published

Nov 14, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-14812A flaw was found in all ghostscript versions 9.x before 9.50…7.8
• CVE-2019-14813A flaw was found in ghostscript, versions 9.x before 9.50, i…9.8
• CVE-2019-14814There is heap-based buffer overflow in Linux kernel, all ver…7.8
• CVE-2019-14815A vulnerability was found in Linux Kernel, where a Heap Over…7.8
• CVE-2019-14816There is heap-based buffer overflow in kernel, all versions …7.8
• CVE-2019-14817A flaw was found in, ghostscript versions prior to 9.50, in …7.8
• CVE-2019-14819A flaw was found during the upgrade of an existing OpenShift…8.8
• CVE-2019-1482Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-14820It was found that keycloak before version 8.0.0 exposes inte…4.3
• CVE-2019-14821An out-of-bounds access issue was found in the Linux kernel,…8.8
• CVE-2019-14822A flaw was discovered in ibus in versions before 1.5.22 that…7.1
• CVE-2019-14823A flaw was found in the "Leaf and Chain" OCSP policy impleme…7.4