CVE-2019-14818

25

FAUCET Score

CVE-2019-14818 is a memory leak vulnerability affecting multiple versions of DPDK, as well as Fedora Project and Red Hat products. A malicious actor with access to the vhost_user socket can send specially crafted messages, leading to a denial of service. The vulnerability has a CVSS score of 7.5 (HIGH), indicating a network-based attack with low complexity and high impact on availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		>= 16.04, < 16.11.10CPE matchmatch criteria	cpe:2.3:a:dpdk:data_plane_development_kit::::::::
		>= 17.02, < 17.11.8CPE matchmatch criteria	cpe:2.3:a:dpdk:data_plane_development_kit::::::::
		>= 18.02, < 18.11.4CPE matchmatch criteria	cpe:2.3:a:dpdk:data_plane_development_kit::::::::
		>= 19.02, < 19.08.1CPE matchmatch criteria	cpe:2.3:a:dpdk:data_plane_development_kit::::::::
		7.0CPE matchmatch criteria	cpe:2.3:a:redhat:enterprise_linux_fast_datapath:7.0:::::::*

CVSS Data

CVSS version used by this source: 3.0

7.5HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

Exploitability Score

3.9

Impact Score

3.6

CvssVersion

3.0

Exploit Intelligence

EPSS Score

2.81%

Probability of exploitation in next 30 days

EPSS Percentile

85.0%

Percentile rank of EPSS score among Peer Group

As of 2026-07-24

Model: v2026.06.15

This CVE's current EPSS score of 0.0282 is in the 73rd percentile among its peer group of 51,466 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (50)

redhatpatch availablevia nvd_reference

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: dpdk-0:19.11-4.el8

redhatpatch availablevia redhat_api

Product: Fast Datapath for Red Hat Enterprise Linux 7Fixed in: openvswitch-0:2.9.0-124.el7fdp

redhatpatch availablevia redhat_api

Product: Fast Datapath for Red Hat Enterprise Linux 7Fixed in: openvswitch2.11-0:2.11.0-35.el7fdp

redhatpatch availablevia redhat_api

Product: Fast Datapath for Red Hat Enterprise Linux 7Fixed in: openvswitch2.12-0:2.12.0-12.el7fdp

redhatpatch availablevia redhat_api

Product: Fast Datapath for Red Hat Enterprise Linux 8Fixed in: openvswitch2.11-0:2.11.0-35.el8fdp

redhatpatch availablevia redhat_api

Product: Fast Datapath for Red Hat Enterprise Linux 8Fixed in: openvswitch2.12-0:2.12.0-12.el8fdp

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7 ExtrasFixed in: dpdk-0:18.11.5-1.el7_8

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens)Fixed in: ansible-role-redhat-subscription-0:1.0.4-2.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens)Fixed in: openstack-manila-1:6.3.2-1.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens)Fixed in: openstack-octavia-ui-0:1.0.2-1.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens)Fixed in: openstack-tempest-1:18.0.0-13.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens)Fixed in: openvswitch2.11-0:2.11.0-35.el7fdp

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens)Fixed in: python-barbican-tests-tempest-0:0.1.0-0.20180828144800.b8bf147.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens)Fixed in: python-hardware-0:0.23.0-0.20200117070144.59211cc.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens)Fixed in: python-keystoneauth1-0:3.4.1-2.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens)Fixed in: python-keystonemiddleware-0:4.22.0-1.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens)Fixed in: python-neutron-lib-0:1.13.0-2.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens)Fixed in: python-novajoin-0:1.3.0-1.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens)Fixed in: python-octavia-tests-tempest-0:1.1.0-1.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens)Fixed in: python-openstackclient-0:3.14.3-5.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens)Fixed in: python-openstacksdk-0:0.11.4-1.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens)Fixed in: python-os-testr-0:1.0.1-0.20200218144109.7dd678e.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens)Fixed in: python-os-vif-0:1.9.2-1.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens)Fixed in: python-ovsdbapp-0:0.10.4-2.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens)Fixed in: python-tempestconf-0:2.4.0-1.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens)Fixed in: rabbitmq-server-0:3.6.15-6.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens)Fixed in: rhosp-release-0:13.0.11-1.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUSFixed in: ansible-role-redhat-subscription-0:1.0.4-2.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUSFixed in: openstack-manila-1:6.3.2-1.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUSFixed in: openstack-octavia-ui-0:1.0.2-1.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUSFixed in: openstack-tempest-1:18.0.0-13.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUSFixed in: python-barbican-tests-tempest-0:0.1.0-0.20180828144800.b8bf147.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUSFixed in: python-hardware-0:0.23.0-0.20200117070144.59211cc.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUSFixed in: python-keystoneauth1-0:3.4.1-2.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUSFixed in: python-keystonemiddleware-0:4.22.0-1.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUSFixed in: python-neutron-lib-0:1.13.0-2.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUSFixed in: python-novajoin-0:1.3.0-1.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUSFixed in: python-octavia-tests-tempest-0:1.1.0-1.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUSFixed in: python-openstackclient-0:3.14.3-5.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUSFixed in: python-openstacksdk-0:0.11.4-1.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUSFixed in: python-os-testr-0:1.0.1-0.20200218144109.7dd678e.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUSFixed in: python-os-vif-0:1.9.2-1.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUSFixed in: python-ovsdbapp-0:0.10.4-2.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUSFixed in: python-tempestconf-0:2.4.0-1.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUSFixed in: rabbitmq-server-0:3.6.15-6.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUSFixed in: rhosp-release-0:13.0.11-1.el7ost

redhatpatch availablevia redhat_api

Product: Red Hat Virtualization 4.2 for Red Hat Enterprise Linux 7.6 EUSFixed in: openvswitch-0:2.9.0-124.el7fdp

redhatend of lifevia redhat_api

Product: Fast Datapath for RHEL 7Fixed in: openvswitch2.10

redhatend of lifevia redhat_api

Product: Red Hat Ceph Storage 4Fixed in: ceph

Vendor Advisories (1)

redhatCVE-2019-14818Moderate

dpdk: possible memory leak leads to denial of service

References

access.redhat.com / errata/RHSA-2020:0165

Third Party Advisory

access.redhat.com / errata/RHSA-2020:0166

Third Party Advisory

access.redhat.com / errata/RHSA-2020:0168

Third Party Advisory

access.redhat.com / errata/RHSA-2020:0171

Third Party Advisory

access.redhat.com / errata/RHSA-2020:0172

Third Party Advisory

bugs.dpdk.org / show_bug.cgi

Issue TrackingPatchVendor Advisory

bugzilla.redhat.com / show_bug.cgi

Issue TrackingPatchThird Party Advisory

lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/ULJ3C7OVBOEVDGSHYC3VCLSUHANGTFFP