Описание
In Storage Performance Development Kit (SPDK) before 19.01, a malicious vhost client (i.e., virtual machine) could carefully construct a circular descriptor chain that would result in a partial denial of service in the SPDK vhost target, because the vhost target did not properly detect such chains.
Ссылки
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 19.01 (исключая)
cpe:2.3:a:spdk:storage_performance_development_kit:*:*:*:*:*:*:*:*
EPSS
Процентиль: 53%
0.00305
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-834
Связанные уязвимости
CVSS3: 5.3
github
больше 3 лет назад
In Storage Performance Development Kit (SPDK) before 19.01, a malicious vhost client (i.e., virtual machine) could carefully construct a circular descriptor chain that would result in a partial denial of service in the SPDK vhost target, because the vhost target did not properly detect such chains.
EPSS
Процентиль: 53%
0.00305
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-834