PT-2022-4500 · Dpdk+9 · Dpdk+9

Tej Rathi · Published 2020-09-25 · Updated 2024-02-21 · CVE-2022-2132

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions DPDK (affected versions not specified)

Description A permissive list of allowed inputs flaw was found in DPDK, allowing a remote attacker to cause a denial of service by sending a crafted Vhost header. The issue is related to the copy desc to mbuf() function and is associated with unlimited resource allocation, which can be exploited by a remote attacker to trigger a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-791

CWE-770

Related Identifiers

ALSA-2022:8263

ALSA-2023:0171

ALT-PU-2020-2878

ALT-PU-2021-1176

ALT-PU-2021-2053

ALT-PU-2023-1744

ALT-PU-2023-1805

BDU:2022-05367

CESA-2023_0171

CVE-2022-2132

DLA-3092-1

DSA-5222-1

OESA-2022-1911

OPENSUSE-SU-2022_3341-1

OPENSUSE-SU-2022_3390-1

OPENSUSE-SU-2022_3430-1

RHSA-2022:6382

RHSA-2022:6383

RHSA-2022:6384

RHSA-2022:6385

RHSA-2022:6386

RHSA-2022:6551

RHSA-2022:6850

RHSA-2022:7268

RHSA-2022:8263

RHSA-2022_8263

RHSA-2023:0166

RHSA-2023:0167

RHSA-2023:0168

RHSA-2023:0169

RHSA-2023:0170

RHSA-2023:0171

RHSA-2023:0172

RHSA-2023_0171

RLSA-2022:8263

RLSA-2023:0171

SUSE-SU-2022:3341-1

SUSE-SU-2022:3356-1

SUSE-SU-2022:3381-1

SUSE-SU-2022:3390-1

SUSE-SU-2022:3429-1

SUSE-SU-2022:3430-1

SUSE-SU-2022_3341-1

SUSE-SU-2022_3356-1

SUSE-SU-2022_3381-1

SUSE-SU-2022_3390-1

SUSE-SU-2022_3429-1

SUSE-SU-2022_3430-1

SUSE-SU-2024:0529-1

SUSE-SU-2024:0530-1

SUSE-SU-2024:0531-1

SUSE-SU-2024:0554-1

SUSE-SU-2024:0576-1

SUSE-SU-2024_0529-1

SUSE-SU-2024_0530-1

SUSE-SU-2024_0531-1

SUSE-SU-2024_0554-1

SUSE-SU-2024_0576-1

USN-5608-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Dpdk

Linuxmint

Red Hat

Rocky Linux

Suse

Ubuntu

References · 71

• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=2099475 · Exploit
• 🔥 https://bugs.dpdk.org/show_bug.cgi?id=1031 · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-2132 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2022:8263 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3356-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2022-1221SE17MD · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-2132 · Security Note
• https://osv.dev/vulnerability/OESA-2022-1911 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3429-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:8263 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-2132 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:0531-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2023:0171 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2022:8263 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-0171.html · Vendor Advisory