CVE-2019-9547

Published: Mar 1, 2019Modified: Jun 17, 2026

5.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

In Storage Performance Development Kit (SPDK) before 19.01, a malicious vhost client (i.e., virtual machine) could carefully construct a circular descriptor chain that would result in a partial denial of service in the SPDK vhost target, because the vhost target did not properly detect such chains.

Affected (1)

Products: Spdk: Storage Performance Development Kit

1 product

Storage Performance Development Kit

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Spdk Storage Performance Development Kit	Before 19.01

Related CWEs

Excessive Iteration

The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.

References (4)

https://github.com/spdk/spdk/commit/eca42c66092b9031711afe215fbc1891ee55f143

Source: cve@mitre.org

Third Party Advisory

https://github.com/spdk/spdk/releases/tag/v19.01

Source: cve@mitre.org

Third Party Advisory

https://github.com/spdk/spdk/commit/eca42c66092b9031711afe215fbc1891ee55f143

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://github.com/spdk/spdk/releases/tag/v19.01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.