dpdk
9 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-11614 | 21.05 – < 21.11-4 | Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library | HIGH 7.4 | 0.6 % | ||
| CVE-2022-2132 | dpdk 21.11, dpdk 20.11, dpdk 19.11 | A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by se | HIGH 8.6 | 2.4 % | ||
| CVE-2022-0669 | Affects v19.11-rc1 and later, Fixed in v22.03-rc4. | A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected number of fds as ancillary data to VHOST_US | MEDIUM 6.5 | 0.3 % | ||
| CVE-2021-3839 | Fixed in dpdk v22.03 | A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inflight.num_queues`, p | HIGH 7.5 | 1.7 % | ||
| CVE-2020-14374 | All dpdk versions before 18.11.10 and before 19.11.5 | A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A flawed bounds checking in the copy_data function leads to a buffe | HIGH 8.8 | 0.4 % | ||
| CVE-2020-14377 | All dpdk versions before 18.11.10 and before 19.11.5 | A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A complete lack of validation of attacker-controlled parameters can | HIGH 7.1 | 0.4 % | ||
| CVE-2020-14376 | All dpdk versions before 18.11.10 and before 19.11.5 | A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A lack of bounds checking when copying iv_data from the VM guest me | HIGH 7.8 | 0.4 % | ||
| CVE-2020-14375 | All dpdk versions before 18.11.10 and before 19.11.5 | A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. Virtio ring descriptors, and the data they describe are in a region | HIGH 7.8 | 0.3 % | ||
| CVE-2020-14378 | All dpdk versions before 18.11.10 and before 19.11.5 | An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc` function can lead to large amounts of CPU cycles | LOW 3.3 | 0.4 % |