A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected number of fds as ancillary data to VHOST_USER_GET_INFLIGHT_FD / VHOST_USER_SET_INFLIGHT_FD messages that are not closed by the vhost-user slave. By sending such messages continuously, the vhost-user master exhausts available fd in the vhost-user slave process, leading to a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade openvswitch2.13-develUpgrade openvswitch2.13-testUpgrade openvswitch2.15-testUpgrade python3-openvswitch2.15Upgrade network-scripts-openvswitch2.15Upgrade openvswitch2.16-develUpgrade python3-openvswitch2.16Upgrade openvswitch2.16Upgrade openvswitch2.13-ipsecUpgrade openvswitch2.13-debuginfoUpgrade openvswitch2.16-testUpgrade network-scripts-openvswitch2.13Upgrade python3-openvswitch2.15-debuginfoUpgrade openvswitch2.15-ipsecUpgrade openvswitch2.13-debugsourceUpgrade openvswitch2.15-debuginfoUpgrade openvswitch2.15Upgrade openvswitch2.15-debugsourceUpgrade python3-openvswitch2.16-debuginfoUpgrade openvswitch2.16-debugsourceUpgrade python3-openvswitch2.13Upgrade python3-openvswitch2.13-debuginfoUpgrade openvswitch2.15-develUpgrade openvswitch2.13Upgrade network-scripts-openvswitch2.16Upgrade openvswitch2.16-debuginfoUpgrade openvswitch2.16-ipsec | May 30, 2022 | May 27, 2022 |
| Debian | — | Upgrade dpdk | Nov 4, 2022 | Aug 29, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade dpdk-toolsUpgrade dpdk | Aug 18, 2022 | Aug 17, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade dpdkUpgrade dpdk-tools | Sep 14, 2022 | Aug 29, 2022 |
| Redhat_linux | — | Upgrade openvswitch2.15-develUpgrade openvswitch2.15-debuginfoUpgrade openvswitch2.13-develUpgrade openvswitch2.15-ipsecUpgrade openvswitch2.15-debugsourceUpgrade openvswitch2.13Upgrade openvswitch2.13-ipsecUpgrade openvswitch2.16-develUpgrade python3-openvswitch2.16-debuginfoUpgrade python3-openvswitch2.15-debuginfoUpgrade openvswitch2.13-debugsourceUpgrade openvswitch2.15Upgrade openvswitch2.16Upgrade network-scripts-openvswitch2.15Upgrade network-scripts-openvswitch2.13Upgrade openvswitch2.16-testNo solution existsUpgrade openvswitch2.16-debuginfoUpgrade openvswitch2.16-debugsourceUpgrade openvswitch2.16-ipsecUpgrade openvswitch2.13-debuginfoUpgrade python3-openvswitch2.13Upgrade python3-openvswitch2.13-debuginfoUpgrade python3-openvswitch2.16Upgrade network-scripts-openvswitch2.16Upgrade openvswitch2.13-testUpgrade python3-openvswitch2.15Upgrade openvswitch2.15-test | May 30, 2022 | May 27, 2022 |
| Suse | — | Upgrade dpdk-thunderxUpgrade dpdk-thunderx-kmp-preemptUpgrade dpdk-kmp-defaultUpgrade dpdk-thunderx-toolsUpgrade dpdkUpgrade dpdk-develUpgrade dpdk-docUpgrade dpdk-thunderx-develUpgrade dpdk-examplesUpgrade dpdk-thunderx-docUpgrade dpdk-thunderx-examplesUpgrade libdpdk-20_0Upgrade dpdk-kmp-preemptUpgrade dpdk-thunderx-kmp-defaultUpgrade dpdk-tools | Oct 26, 2022 | Aug 29, 2022 |
| Ubuntu | — | Upgrade dpdk | May 5, 2022 | May 4, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub