CVE-2022-28199

2022-09-0117:15:08

CWE-20

CWE-1284

[email protected]

web.nvd.nist.gov

nvidia

mlnx_dpdk

vulnerability

remote attacker

denial of service

data integrity

confidentiality

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

56.3%

JSON

NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.

Affected configurations

Nvd

Node

nvidiadata_plane_development_kitRange19.11_1.0.0–20.11_5.0.0

AND

linuxlinux_kernelMatch-

microsoftwindowsMatch-

VendorProductVersionCPE
nvidiadata_plane_development_kit*cpe:2.3:a:nvidia:data_plane_development_kit:*:*:*:*:*:*:*:*
linuxlinux_kernel-cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
nvidia	data_plane_development_kit	*	cpe:2.3:a:nvidia:data_plane_development_kit::::::::
linux	linux_kernel	-	cpe:2.3:o:linux:linux_kernel:-:::::::*
microsoft	windows	-	cpe:2.3:o:microsoft:windows:-:::::::*