A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inflight.num_queues`, possibly causing out-of-bounds memory read/write. Any software using DPDK vhost library may crash as a result of this vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade dpdk-docUpgrade dpdk-toolsUpgrade dpdk-develUpgrade dpdk | Nov 21, 2022 | Aug 23, 2022 |
| Centos_linux | — | Upgrade openvswitch2.16Upgrade openvswitch2.15-debugsourceUpgrade openvswitch2.16-debugsourceUpgrade python3-openvswitch2.13Upgrade openvswitch2.16-ipsecUpgrade openvswitch2.13-develUpgrade python3-openvswitch2.16-debuginfoUpgrade openvswitch2.15Upgrade openvswitch2.15-debuginfoUpgrade dpdkUpgrade openvswitch2.13-testUpgrade openvswitch2.15-develUpgrade openvswitch2.15-ipsecUpgrade network-scripts-openvswitch2.16Upgrade openvswitch2.16-debuginfoUpgrade network-scripts-openvswitch2.15Upgrade openvswitch2.16-develUpgrade openvswitch2.15-testUpgrade dpdk-docUpgrade network-scripts-openvswitch2.13Upgrade dpdk-debuginfoUpgrade openvswitch2.13-debugsourceUpgrade openvswitch2.16-testUpgrade openvswitch2.13Upgrade python3-openvswitch2.13-debuginfoUpgrade dpdk-develUpgrade openvswitch2.13-debuginfoUpgrade dpdk-toolsUpgrade dpdk-debugsourceUpgrade python3-openvswitch2.16Upgrade python3-openvswitch2.15-debuginfoUpgrade python3-openvswitch2.15Upgrade openvswitch2.13-ipsec | May 30, 2022 | May 27, 2022 |
| Debian | — | Upgrade dpdk | Nov 4, 2022 | Aug 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade dpdkUpgrade dpdk-tools | Aug 18, 2022 | Aug 17, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade dpdk-toolsUpgrade dpdk | Sep 14, 2022 | Aug 23, 2022 |
| Oracle_linux | — | Upgrade dpdkUpgrade dpdk-develUpgrade dpdk-toolsUpgrade dpdk-doc | Nov 22, 2022 | Apr 29, 2022 |
| Redhat_linux | — | Upgrade dpdk-docUpgrade dpdk-develUpgrade dpdk-toolsUpgrade dpdk-debuginfoUpgrade dpdk-debugsourceUpgrade dpdkNo solution exists | May 30, 2022 | May 27, 2022 |
| Rocky_linux | — | Upgrade dpdkUpgrade dpdk-develUpgrade dpdk-debugsourceUpgrade dpdk-toolsUpgrade dpdk-debuginfo | Mar 12, 2024 | Aug 23, 2022 |
| Suse | — | Upgrade dpdk-thunderx-develUpgrade dpdk-thunderx-kmp-defaultUpgrade dpdk-kmp-defaultUpgrade dpdk-develUpgrade dpdk-thunderx-docUpgrade dpdkUpgrade dpdk-toolsUpgrade dpdk-thunderx-kmp-preemptUpgrade dpdk-kmp-preemptUpgrade dpdk-thunderx-toolsUpgrade dpdk-thunderxUpgrade dpdk-thunderx-examplesUpgrade libdpdk-20_0Upgrade dpdk-examplesUpgrade dpdk-doc | Oct 26, 2022 | Aug 23, 2022 |
| Ubuntu | — | Upgrade dpdk | May 5, 2022 | May 4, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub