Dpdk / Data Plane Development Kit
15 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2022-2132 | dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs | HIGH | 8.6 | Aug 31, 2022 |
| CVE-2022-0669 | dpdk: sending vhost-user-inflight type messages could lead to DoS | MEDIUM | 6.5 | Aug 29, 2022 |
| CVE-2021-3839 | DPDK: out-of-bounds read/write in vhost_user_set_inflight_fd() may lead to crash | HIGH | 7.5 | Aug 23, 2022 |
| CVE-2020-14374 | dpdk: remote Code Execution in vhost_crypto (VM Escape) | HIGH | 8.8 | Sep 30, 2020 |
| CVE-2020-14377 | dpdk: write_back_data buffer over read (cipher->para.dst_data_len & desc->len) | HIGH | 7.1 | Sep 30, 2020 |
| CVE-2020-14376 | dpdk: buffer overflow copying iv_data from guest to host (prepare_sym_cipher_op & prepare_sym_chain_op) | HIGH | 7.8 | Sep 30, 2020 |
| CVE-2020-14375 | dpdk: time-of-check time-of-use vulnerabilities throughout vhost_crypto.c | HIGH | 7.8 | Sep 30, 2020 |
| CVE-2020-14378 | dpdk: partial Denial of Service due to Integer Underflow | LOW | 3.3 | Sep 30, 2020 |
| CVE-2020-10725 | dpdk: librte_vhost Malicious guest could cause segfault by sending invalid Virtio descriptor | HIGH | 7.7 | May 20, 2020 |
| CVE-2020-10726 | dpdk: librte_vhost VHOST_USER_GET_INFLIGHT_FD message flooding to result in a DoS | MEDIUM | 6.0 | May 20, 2020 |
| CVE-2020-10722 | dpdk: librte_vhost Integer overflow in vhost_user_set_log_base() | MEDIUM | 6.7 | May 19, 2020 |
| CVE-2020-10723 | dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair() | MEDIUM | 6.7 | May 19, 2020 |
| CVE-2020-10724 | dpdk: librte_vhost Missing inputs validation in Vhost-crypto | MEDIUM | 5.1 | May 19, 2020 |
| CVE-2019-14818 | dpdk: possible memory leak leads to denial of service | HIGH | 7.5 | Nov 14, 2019 |
| CVE-2018-1059 | dpdk: Information exposure in unchecked guest physical to host virtual address translations | MEDIUM | 6.1 | Apr 24, 2018 |
Showing 1 to 15 of 15 CVEs