Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-2132


A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending a crafted Vhost header to DPDK.


Published

2022-08-31T16:15:10.770

Last Modified

2024-11-21T07:00:23.680

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.6 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-791
  • Type: Primary
    NVD-CWE-Other

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application dpdk data_plane_development_kit < 19.11 Yes
Application dpdk data_plane_development_kit < 20.11 Yes
Application dpdk data_plane_development_kit < 21.11 Yes
Operating System fedoraproject fedora 36 Yes
Operating System debian debian_linux 10.0 Yes
Application redhat enterprise_linux_fast_datapath 7.0 Yes
Application redhat enterprise_linux_fast_datapath 8.0 Yes
Application redhat enterprise_linux_fast_datapath 9.0 Yes
Application redhat openshift_container_platform 4.0 Yes
Application redhat openstack_platform 13.0 Yes
Application redhat virtualization 4.0 Yes
Operating System redhat enterprise_linux 7.0 Yes
Operating System redhat enterprise_linux 8.0 Yes
Operating System redhat enterprise_linux 9.0 Yes

References