usc-isi-bass / hashdos_vulnerability_detection Goto Github PK

So I ran the hash func discovery test on DPDK, a high speed packet processing framework, and found 18 vulnerable sdbmhash functions in these locations:

• librte_pmd_ixgbe - drivers for Intel 10-Gigabit NICs
• librte_pmd_fm10k - drivers for Intel FM10000 40GbE/100GbE NICs
• librte_pmd_qat - drivers for Intel QuickAssist crytography acceleration and compression
• librte_pmd_lio - drivers for Cavium LiquidIO II adapters
• librte_rawdev_ntb - bridge between two separate hosts using DPDK
• librte_gro - dpdk implementation of generic receive offload, which aggregates multiple incoming packets belonging to the same stream

It might be worth looking into since DPDK is a really big project in the SDN space that's in production use at major companies right now. Since it focuses on speed, finding a hash collision vulnerability in these could be a pretty big discovery.

results from the test run

@NicolaasWeideman