Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

enterprise linux fast datapath vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2021-3905
A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by keeping sending packet fragments.
Openvswitch OpenvswitchRedhat Enterprise Linux Fast Datapath 7.0Canonical Ubuntu Linux 21.10Fedoraproject Fedora 35Redhat Enterprise Linux Fast Datapath 8.0
NA
CVE-2022-2132
A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote malicious user to cause a denial of service triggered by sending a crafted Vhost header to DPDK.
Dpdk Data Plane Development KitFedoraproject Fedora 36Debian Debian Linux 10.0Redhat Enterprise Linux 7.0Redhat Virtualization 4.0Redhat Enterprise Linux Fast Datapath 7.0Redhat Enterprise Linux 8.0Redhat Openshift Container Platform 4.0Redhat Openstack Platform 13.0Redhat Enterprise Linux Fast Datapath 8.0Redhat Enterprise Linux 9.0Redhat Enterprise Linux Fast Datapath 9.0
5
CVSSv2
CVE-2019-14818
A flaw was found in all dpdk version 17.x.x prior to 17.11.8, 16.x.x prior to 16.11.10, 18.x.x prior to 18.11.4 and 19.x.x prior to 19.08.1 where a malicious master, or a container with access to vhost_user socket, can send specially crafted VRING_SET_NUM messages, resulting in a...
Dpdk Data Plane Development KitRedhat Enterprise Linux Fast Datapath 7.0Redhat Openstack 10Redhat Enterprise Linux Fast Datapath 8.0Redhat Virtualization Eus 4.2Fedoraproject Fedora 31
NA
CVE-2021-3839
A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inflight.num_queues`, possibly causing out-of-bounds memory read/write. Any software using DPDK vhost library may crash as a result of this vulnerability.
Dpdk Data Plane Development KitDpdk Data Plane Development Kit 22.03Fedoraproject Fedora 35Redhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Redhat Enterprise Linux Fast Datapath 7.0Redhat Enterprise Linux Fast Datapath 8.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
hardcodedarbitrary codeCVE-2024-2404CVE-2024-21111CVE-2024-28627CVE-2024-4073information disclosureCVE-2024-32780CVE-2024-4040
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook