Most recent entries from all

ALSA-2022:8263 — Important: dpdk security and bug fix update

Affected: AlmaLinux:9: dpdk, AlmaLinux:9: dpdk-devel, AlmaLinux:9: dpdk-doc, AlmaLinux:9: dpdk-tools

The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space.

Security Fix(es):

* dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs (CVE-2022-2132) * DPDK: out-of-bounds read/write in vhost_user_set_inflight_fd() may lead to crash (CVE-2021-3839) * dpdk: error recovery in mlx5 driver not handled properly, allowing for denial of service (CVE-2022-28199)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2022-05391

certfr-2022-avi-806 — De multiples vulnérabilités ont été découvertes dans les produits Cisco. Certaines d'entre elles permettent à un attaqu…

certfr-2022-avi-806

cisco-sa-mlx5-jbPCrqD8 — Vulnerability in NVIDIA Data Plane Development Kit Affecting Cisco Products: August 2022

On August 29, 2022, NVIDIA announced the following vulnerability with a medium impact: CVE-2022-28199: Security Bulletin: NVIDIA Data Plane Development Kit (MLNX_DPDK) - August 2022 For a description of this vulnerability, see Security Bulletin: NVIDIA Data Plane Development Kit (MLNX_DPDK) - August 2022 ["https://nvidia.custhelp.com/app/answers/detail/a_id/5389"]. This advisory will be updated as additional information becomes available.

EUVD-2026-15639

fkie_cve-2022-28199

NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.

GHSA-x5mv-h4g3-j3r2

gsd-2022-28199

OESA-2022-1965 — dpdk security update

Affected: openEuler:20.03-LTS-SP1: dpdk, openEuler:20.03-LTS-SP3: dpdk, openEuler:22.03-LTS: dpdk

DPDK core includes kernel modules, core libraries and tools.testpmd application allows to test fast packet processing environments on arm64 platforms. For instance, it can be used to check that environment can support fast path applications such as 6WINDGate, pktgen, rumptcpip, etc. More libraries are available as extensions in other packages. Security Fix(es): NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.(CVE-2022-28199)

RHSA-2022:6502 — Red Hat Security Advisory: openvswitch2.13 security update

dpdk: error recovery in mlx5 driver not handled properly, allowing for denial of service

RHSA-2022:8263 — Red Hat Security Advisory: dpdk security and bug fix update

DPDK: out-of-bounds read/write in vhost_user_set_inflight_fd() may lead to crash dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs dpdk: error recovery in mlx5 driver not handled properly, allowing for denial of service

SUSE-SU-2022:3390-1 — Security update for dpdk

Security update for dpdk

UBUNTU-CVE-2022-28199

Affected: Ubuntu:20.04:LTS: dpdk, Ubuntu:22.04:LTS: dpdk

WID-SEC-W-2023-1021 — Oracle Communications: Mehrere Schwachstellen

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.