← Back

Enterprise Linux Fast Datapath

enterprise_linux_fast_datapath

Vendor: Redhat • 5 CVEs

CVEs (5)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-2132
4Debian
DpdkFedoraproject+1 more
8Data Plane Development Kit
Debian LinuxEnterprise Linux+5 more
Nov 21, 2024
Aug 31, 2022
N/A· v4
8.6 HIGH· v3
N/A· v2
A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending a crafted Vhost header to DPDK.
CVE-2021-3905
4Canonical
FedoraprojectOpenvswitch+1 more
4Enterprise Linux Fast Datapath
FedoraOpenvswitch+1 more
Nov 21, 2024
Aug 23, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by keeping sending packet fragments.
CVE-2021-3839
3Dpdk
FedoraprojectRedhat
4Data Plane Development Kit
Enterprise LinuxEnterprise Linux Fast Datapath+1 more
Nov 21, 2024
Aug 23, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inflight.num_queues`, possibly causing out-of-bounds memory read/write. Any software using DPDK vhost l...Show more
A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inflight.num_queues`, possibly causing out-of-bounds memory read/write. Any software using DPDK vhost library may crash as a result of this vulnerability.Show less
CVE-2019-14818
3Dpdk
FedoraprojectRedhat
5Data Plane Development Kit
Enterprise Linux Fast DatapathFedora+2 more
Nov 21, 2024
Nov 14, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhost_user socket, can send spec...Show more
A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhost_user socket, can send specially crafted VRING_SET_NUM messages, resulting in a memory leak including file descriptors. This flaw could lead to a denial of service condition.Show less
CVE-2018-1059
3Canonical
DpdkRedhat
9Ceph Storage
Data Plane Development KitEnterprise Linux+6 more
Nov 21, 2024
Apr 24, 2018
N/A· v4
6.1 MEDIUM· v3
2.9 LOW· v2
The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead t...Show more
The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable.Show less