p PatchFirst

PatchFirst · Latest vulnerabilities

dpdk vulnerabilities · Page 2

Vulnerabilities published for dpdk in the last 30 days: 14. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 22

  1. CVE-2019-14818

    High · CVSS 7.5EPSS 2.81%Fix available

    CVE-2019-14818

    A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhost_user socket, can send specially crafted VRING_SET_NUM messages, resulting in a memory leak including file descriptors. This flaw could lead to a denial of service condition.

    dpdkOperating systems
    • Update to 17.11.8-0~ubuntu18.04.2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. CVE-2018-1059

    Medium · CVSS 6.1EPSS 0.79%Fix available

    CVE-2018-1059

    The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable.

    dpdkOperating systems
    • Update to 17.11.2-1ubuntu0.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →