CVE-2022-2132

Published: 31 August 2022

A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending a crafted Vhost header to DPDK.

Priority

CVSS 3 base score: 8.6

Status

Package	Release	Status
dpdk Launchpad, Ubuntu, Debian	bionic	Released (17.11.10-0ubuntu0.2)
	focal	Released (19.11.13-0ubuntu0.20.04.1)
	jammy	Released (21.11.2-0ubuntu0.22.04.1)
	kinetic	Released (21.11.2-0ubuntu1)
	trusty	Does not exist
	upstream	Needs triage
	xenial	Needs triage
	Patches: upstream: https://git.dpdk.org/dpdk/commit/?id=71bd0cc536ad6d84188d947d6f24c17400d8f623 (main) upstream: https://git.dpdk.org/dpdk/commit/?id=dc1516e260a0df272b218392faf6db3cbf45e717 (main) upstream: https://git.dpdk.org/dpdk-stable/commit/?id=f167022606b5ccca27a627ae599538ce2348ef67 (v21.11.2) upstream: https://git.dpdk.org/dpdk-stable/commit/?id=e12d415556994d0901c317f6338ed2961185465f (v21.11.2) upstream: https://git.dpdk.org/dpdk-stable/commit/?id=8fff8520f356635f6ac3755df1d04f9f1d097968 (v20.11.6) upstream: https://git.dpdk.org/dpdk-stable/commit/?id=089e01b375eb8e5394603308d17ee84b551ff369 (v20.11.6) upstream: https://git.dpdk.org/dpdk-stable/commit/?id=5b3c25e6ee2c68887aae166aed57d0b4af91fa60 (v19.11.13) upstream: https://git.dpdk.org/dpdk-stable/commit/?id=e73049ea26a588518bde750f46ac700462a598ed (v19.11.13)

References

Bugs

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›