CVE-2020-10724

A vulnerability was found in DPDK versions 18.11 and above. The vhost-crypto library code is missing validations for user-supplied values, potentially allowing an information leak through an out-of-bounds memory read.

• CWE-190
• CWE-125

• http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00045.htmlBroken Link, Third Party Advisory
• https://bugs.dpdk.org/show_bug.cgi?id=269Issue Tracking, Patch, Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10724Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRHKFVV4MRWNNJOYQOVP64L4UVWYPEO4/
• https://usn.ubuntu.com/4362-1/Third Party Advisory
• https://www.openwall.com/lists/oss-security/2020/05/18/2Mailing List, Third Party Advisory
• https://www.oracle.com/security-alerts/cpujan2021.htmlThird Party Advisory
• https://www.oracle.com/security-alerts/cpuoct2020.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00045.htmlBroken Link, Third Party Advisory
• https://bugs.dpdk.org/show_bug.cgi?id=269Issue Tracking, Patch, Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10724Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRHKFVV4MRWNNJOYQOVP64L4UVWYPEO4/
• https://usn.ubuntu.com/4362-1/Third Party Advisory
• https://www.openwall.com/lists/oss-security/2020/05/18/2Mailing List, Third Party Advisory
• https://www.oracle.com/security-alerts/cpujan2021.htmlThird Party Advisory
• https://www.oracle.com/security-alerts/cpuoct2020.htmlThird Party Advisory

Published

May 19, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-10719A flaw was found in Undertow in versions before 2.1.1.Final,…6.5
• CVE-2020-1072An information disclosure vulnerability exists when the Wind…5.5
• CVE-2020-10720A flaw was found in the Linux kernel's implementation of GRO…5.5
• CVE-2020-10721A flaw was found in the fabric8-maven-plugin 4.0.0 and later…7.8
• CVE-2020-10722A vulnerability was found in DPDK versions 18.05 and above. …6.7
• CVE-2020-10723A memory corruption issue was found in DPDK versions 17.05 a…6.7
• CVE-2020-10725A flaw was found in DPDK version 19.11 and above that allows…7.7
• CVE-2020-10726A vulnerability was found in DPDK versions 19.11 and above. …4.4
• CVE-2020-10727A flaw was found in ActiveMQ Artemis management API from ver…5.5
• CVE-2020-10728A flaw was found in automationbroker/apb container in versio…7.8
• CVE-2020-10729A flaw was found in the use of insufficiently random values …5.5
• CVE-2020-1073A remote code execution vulnerability exists in the way that…8.1