CVE-2022-2132
CVE-2022-2132
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending a crafted Vhost header to DPDK.
CVSS 8.6 · High · EPSS 2.2% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
dpdk
- Versions
- dpdk 21.11, dpdk 20.11, dpdk 19.11: Affected
No fix published
dpdk Debian:12
- Affected ranges
- ECOSYSTEM: < 22.11.1-2
Update to 22.11.1-2
dpdk Debian:13
- Affected ranges
- ECOSYSTEM: < 22.11.1-2
Update to 22.11.1-2
dpdk Debian:14
- Affected ranges
- ECOSYSTEM: < 22.11.1-2
Update to 22.11.1-2
dpdk Ubuntu:16.04:LTS
- Versions
- 2.0.0-0ubuntu1
- 2.0.0-0ubuntu2
- 2.0.0-0ubuntu3
- 2.2.0-0ubuntu1
- 2.2.0-0ubuntu3
- 2.2.0-0ubuntu5
- 2.2.0-0ubuntu6
- 2.2.0-0ubuntu7
- 2.2.0-0ubuntu8
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
dpdk Ubuntu:18.04:LTS
- Versions
- 17.05.2-0ubuntu1
- 17.05.2-0ubuntu2
- 17.11-3
- 17.11-4
- 17.11-5
- 17.11.1-6
- 17.11.2-1ubuntu0.1
- 17.11.3-3~ubuntu0.18.04
- 17.11.5-0~ubuntu18.04.1
- 17.11.6-0~ubuntu18.04.1
- 17.11.8-0~ubuntu18.04.2
- 17.11.9-0ubuntu18.04.1
- 17.11.9-0ubuntu18.04.2
- 17.11.10-0ubuntu0.1
- Affected ranges
- ECOSYSTEM: < 17.11.10-0ubuntu0.2
Update to 17.11.10-0ubuntu0.2
dpdk Ubuntu:20.04:LTS
- Versions
- 18.11.2-4
- 18.11.3-1
- 18.11.4-1
- 18.11.4-1ubuntu1
- 18.11.5-1
- 19.11-2ubuntu1
- 19.11-2ubuntu2
- 19.11.1-0ubuntu1
- 19.11.1-0ubuntu1.1
- 19.11.3-0ubuntu0.1
- 19.11.3-0ubuntu0.2
- 19.11.6-0ubuntu0.20.04.1
- 19.11.7-0ubuntu0.20.04.1
- 19.11.7-0ubuntu0.20.04.2
- 19.11.10-0ubuntu0.20.04.1
- 19.11.12-0ubuntu0.20.04.1
- Affected ranges
- ECOSYSTEM: < 19.11.13-0ubuntu0.20.04.1
Update to 19.11.13-0ubuntu0.20.04.1
dpdk Ubuntu:22.04:LTS
- Versions
- 20.11.3-0ubuntu1
- 20.11.3-0ubuntu3
- 21.11-1
- 21.11-1build1
- 21.11.1-0ubuntu0.3
- Affected ranges
- ECOSYSTEM: < 21.11.2-0ubuntu0.22.04.1
Update to 21.11.2-0ubuntu0.22.04.1