PT-2022-4522 · Mellanox+7 · Mlnx Dpdk+7

Published 2022-08-29 · Updated 2023-05-15 · CVE-2022-28199

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions MLNX DPDK (affected versions not specified)

Description The issue is related to improper error recovery handling in the network stack, which can allow a remote attacker to cause denial of service and potentially impact data integrity and confidentiality. This is due to an unbounded resource allocation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Allocation of Resources Without Limits

RCE

Weakness Enumeration

CWE-1284

CWE-770

CWE-20

Related Identifiers

ALSA-2022:8263

ALT-PU-2023-1744

ALT-PU-2023-1805

BDU:2022-05391

CVE-2022-28199

DSA-5222-1

OESA-2022-1965

OPENSUSE-SU-2022_3341-1

OPENSUSE-SU-2022_3390-1

RHSA-2022:6502

RHSA-2022:6503

RHSA-2022:6504

RHSA-2022:6505

RHSA-2022:6506

RHSA-2022:8263

RHSA-2022_8263

RLSA-2022:8263

SUSE-SU-2022:3341-1

SUSE-SU-2022:3390-1

SUSE-SU-2022:3429-1

USN-5608-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Cisco Ios Xe

Mlnx Dpdk

Red Hat

Rocky Linux

Suse

References · 54

• https://osv.dev/vulnerability/RLSA-2022:8263 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-28199 · Security Note
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2022-1221SE17MD · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3429-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:8263 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2022:8263 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3341-1 · Vendor Advisory
• https://nvidia.custhelp.com/app/answers/detail/a_id/5389 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mlx5-jbPCrqD8 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-28199 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5222-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-2132 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-05391 · Security Note
• https://errata.almalinux.org/9/ALSA-2022-8263.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-28199 · Vendor Advisory