CVE-2022-2132

概要

参考情報

• bugs.dpdk.org/show_bug.cgi · Exploit
• bugzilla.redhat.com/show_bug.cgi · Exploit
• lists.debian.org/debian-lts-announce/2022/09/msg00000.html · Mailing List

data plane development kit のその他の脆弱性

• CVE-2022-0669中 6.5A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected number of fds as ancillary data to VHOST_US…
• CVE-2021-3839高 7.5A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inflight.num_queues`, p…
• CVE-2020-14374高 8.8A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A flawed bounds checking in the copy_data function leads to a buffe…
• CVE-2020-14378低 3.3An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc` function can lead to large amounts of CPU cycles…
• CVE-2020-14377高 7.1A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A complete lack of validation of attacker-controlled parameters can…