How severe is CVE-2020-14377?

This vulnerability has a severity rating of HIGH with a CVSS score of 7.1 out of 10.

What type of vulnerability is CVE-2020-14377?

This is classified as CWE-125, which is a common weakness in software security.

CVE-2020-14377

HIGH Year: 2020

CVSS v3 Score

7.1

High

CVSS v2 Score

3.6

Low

Weakness Type

CWE-125

View all →

Vulnerability Description

A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A complete lack of validation of attacker-controlled parameters can lead to a buffer over read. The results of the over read are then written back to the guest virtual machine memory. This vulnerability can be used by an attacker in a virtual machine to read significant amounts of host memory. The highest threat from this vulnerability is to data confidentiality and system availability.

CVE-2015-8743

HIGH

CVSS:7.1(High)

QEMU (aka Quick Emulator) built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It could occur while performing 'ioport' r/w operations. A privileged (CAP_SYS_RAWIO)...

CWE-1252015

CVE-2016-10165

HIGH

CVSS:7.1(High)

The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which t...

CWE-1252016

CVE-2016-4682

HIGH

CVSS:7.1(High)

An issue was discovered in certain Apple products. macOS before 10.12 is affected. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain se...

CWE-1252016

CVE-2016-4773

HIGH

CVSS:7.1(High)

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds re...

CWE-1252016