CVE-2022-2132

CVE-2022-2132 is a DoS vulnerability in DPDK caused by a permissive input validation that allows a remote attacker to trigger a denial of service by sending a crafted Vhost header. The issue affects the DPDK component handling Vhost descriptors, where processing of the Vhost header can exhaust mb...

CVE-2019-14818

The CVE-2019-14818 issue affects DPDK packages in multiple lines: 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4, and 19.x.x before 19.08.1. A malicious master or a container with access to a vhost_user socket can send crafted VRING_SET_NUM messages, causing a memory leak th...

CVE-2021-3839

CVE-2021-3839 affects the DPDK vhost library: vhost_user_set_inflight_fd() does not validate msg->payload.inflight.num_queues, which can cause out-of-bounds memory read/write and may crash software using the DPDK vhost library. The connected Nessus/issuer entries (e.g., MiracleLinux, TencentOS...

CVE-2018-1059

The CVE concerns the DPDK vhost-user interface, where Guest Physical Addresses to Host Virtual Addresses translations do not verify that the requested guest physical range is fully mapped and contiguous. This can expose vhost-user backend memory to a malicious guest. The vulnerability affects all...

CVE-2021-3905

Open vSwitch (OVS) is affected by CVE-2021-3905: a memory leak in userspace IP fragmentation processing could allow an attacker to exhaust memory by continuously sending packet fragments. The issue is in OVS, and exploitation would target memory consumption, with an impact on availability. Remedi...