CVE-2022-2132
High
Description
A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending a crafted Vhost header to DPDK.
SeverityHigh
CVSS8.6
Exploit probability—
Product
Dpdk Data Plane Development Kit
PublishedAug 31, 2022
First seenAug 31, 2022
Weakness typeCWE-791CWE-791
How to fix
Update
- dpdk data_plane_development_kit19.11, 20.11, 21.11 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dpdk data_plane_development_kit | v < 19.11, 20.0 ≤ v < 20.11, 21.0 ≤ v < 21.11 | 19.11, 20.11, 21.11 |
| fedoraproject fedora | 36 | — |
| debian debian_linux | 10.0 | — |
| redhat enterprise_linux_fast_datapath | 7.0, 8.0, 9.0 | — |
| redhat openshift_container_platform | 4.0 | — |
| redhat openstack_platform | 13.0 | — |
| redhat virtualization | 4.0 | — |
| redhat enterprise_linux | 7.0, 8.0, 9.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.