DPDK Data Plane Development Kit 17.05.1

CPE Details

DPDK Data Plane Development Kit 17.05.1
dpdk
data_plane_development_kit
17.05.1
2019-12-03
17h56 +00:00
2019-12-03
17h56 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:dpdk:data_plane_development_kit:17.05.1:*:*:*:*:*:*:*

Informations

Vendor

dpdk

Product

data_plane_development_kit

Version

17.05.1

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2022-2132 2022-08-31
13h32 +00:00		 A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending a crafted Vhost header to DPDK.
8.6
High
CVE-2021-3839 2022-08-23
13h52 +00:00		 A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inflight.num_queues`, possibly causing out-of-bounds memory read/write. Any software using DPDK vhost library may crash as a result of this vulnerability.
7.5
High
CVE-2020-10725 2020-05-20
11h16 +00:00		 A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vhost-user backend application running on the host, which could result in a loss of connectivity for the other guests running on that host. This is caused by a missing validity check of the descriptor address in the function `virtio_dev_rx_batch_packed()`.
7.7
High
CVE-2020-10726 2020-05-20
11h04 +00:00		 A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct access to the vhost-user socket can keep sending VHOST_USER_GET_INFLIGHT_FD messages, causing a resource leak (file descriptors and virtual memory), which may result in a denial of service.
6
Medium
CVE-2020-10722 2020-05-19
16h04 +00:00		 A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.
6.7
Medium
CVE-2020-10724 2020-05-19
15h59 +00:00		 A vulnerability was found in DPDK versions 18.11 and above. The vhost-crypto library code is missing validations for user-supplied values, potentially allowing an information leak through an out-of-bounds memory read.
5.1
Medium
CVE-2019-14818 2019-11-13
23h00 +00:00		 A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhost_user socket, can send specially crafted VRING_SET_NUM messages, resulting in a memory leak including file descriptors. This flaw could lead to a denial of service condition.
7.5
High
CVE-2018-1059 2018-04-24
18h00 +00:00		 The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable.
6.1
Medium