data plane development kit vulnerabilities and fixes

Recent CVEs affecting data plane development kit, with upgrade or downgrade steps. 9 tracked.

Also searched as: dataplanedevelopmentkit.

data plane development kit has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 9. Most recent: 2022-09-01. Highest priority: CVE-2022-2132 (score 66/100).

• CVE-2022-2132 HIGH 8.6 UPGRADE MITIGATE A permissive list of allowed inputs flaw was found in DPDK
• CVE-2022-28199 MEDIUM 6.5 UPGRADE NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network st
• CVE-2022-0669 MEDIUM 6.5 UPGRADE DOWNGRADE A flaw was found in dpdk
• CVE-2021-3839 HIGH 7.5 UPGRADE MITIGATE A flaw was found in the vhost library in DPDK
• CVE-2020-14378 LOW 3.3 UPGRADE MITIGATE An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc` function can lead
• CVE-2020-14377 HIGH 7.1 UPGRADE MITIGATE A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5
• CVE-2020-14376 HIGH 7.8 UPGRADE MITIGATE A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5
• CVE-2020-14375 HIGH 7.8 UPGRADE MITIGATE A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5
• CVE-2020-14374 HIGH 8.8 UPGRADE MITIGATE A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5

FAQ

How do I fix data plane development kit vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is data plane development kit being exploited right now?

None of the tracked data plane development kit CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which data plane development kit CVE should I patch first?

CVE-2022-2132 currently ranks highest (66/100): A permissive list of allowed inputs flaw was found in DPDK.

RSS feed for data plane development kit · ← Back to latest CVEs