A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected number of fds as ancillary data to VHOST_USER_GET_INFLIGHT_FD / VHOST_USER_SET_INFLIGHT_FD messages that are not closed by the vhost-user slave. By sending such messages continuously, the vhost-user master exhausts available fd in the vhost-user slave process, leading to a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade openvswitch2.16-develUpgrade openvswitch2.13-debuginfoUpgrade openvswitch2.13-ipsecUpgrade openvswitch2.16-testUpgrade network-scripts-openvswitch2.15Upgrade openvswitch2.13-develUpgrade python3-openvswitch2.16Upgrade openvswitch2.16Upgrade openvswitch2.13-testUpgrade python3-openvswitch2.15Upgrade openvswitch2.15-testUpgrade openvswitch2.15-debuginfoUpgrade openvswitch2.15Upgrade openvswitch2.15-debugsourceUpgrade openvswitch2.16-debugsourceUpgrade python3-openvswitch2.16-debuginfoUpgrade python3-openvswitch2.13Upgrade openvswitch2.16-debuginfoUpgrade openvswitch2.13Upgrade network-scripts-openvswitch2.16Upgrade openvswitch2.15-develUpgrade python3-openvswitch2.15-debuginfoUpgrade python3-openvswitch2.13-debuginfoUpgrade openvswitch2.16-ipsecUpgrade openvswitch2.15-ipsecUpgrade network-scripts-openvswitch2.13Upgrade openvswitch2.13-debugsource | May 30, 2022 | May 27, 2022 |
| Debian | — | Upgrade dpdk | Nov 4, 2022 | Aug 29, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade dpdk-toolsUpgrade dpdk | Aug 18, 2022 | Aug 17, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade dpdk-toolsUpgrade dpdk | Sep 14, 2022 | Aug 29, 2022 |
| Redhat_linux | — | Upgrade openvswitch2.13-ipsecUpgrade python3-openvswitch2.15-debuginfoUpgrade openvswitch2.16-develUpgrade network-scripts-openvswitch2.15No solution existsUpgrade openvswitch2.16Upgrade openvswitch2.13-debugsourceUpgrade openvswitch2.15-ipsecUpgrade openvswitch2.15-debugsourceUpgrade openvswitch2.15-develUpgrade openvswitch2.13-develUpgrade network-scripts-openvswitch2.13Upgrade python3-openvswitch2.16-debuginfoUpgrade openvswitch2.13Upgrade openvswitch2.15Upgrade openvswitch2.15-debuginfoUpgrade openvswitch2.16-testUpgrade openvswitch2.16-ipsecUpgrade python3-openvswitch2.13Upgrade openvswitch2.13-debuginfoUpgrade network-scripts-openvswitch2.16Upgrade python3-openvswitch2.16Upgrade python3-openvswitch2.13-debuginfoUpgrade openvswitch2.13-testUpgrade openvswitch2.15-testUpgrade python3-openvswitch2.15Upgrade openvswitch2.16-debugsourceUpgrade openvswitch2.16-debuginfo | May 30, 2022 | May 27, 2022 |
| Suse | — | Upgrade dpdk-thunderx-develUpgrade dpdk-kmp-preemptUpgrade dpdk-thunderx-docUpgrade dpdk-thunderx-kmp-defaultUpgrade dpdk-toolsUpgrade libdpdk-20_0Upgrade dpdk-examplesUpgrade dpdk-docUpgrade dpdk-thunderx-examplesUpgrade dpdk-develUpgrade dpdkUpgrade dpdk-thunderx-toolsUpgrade dpdk-thunderx-kmp-preemptUpgrade dpdk-thunderxUpgrade dpdk-kmp-default | Oct 26, 2022 | Aug 29, 2022 |
| Ubuntu | — | Upgrade dpdk | May 5, 2022 | May 4, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub