Data Plane Development Kit
Approved changes feed: RSS · Atom
cpe:2.3:a:dpdk:data_plane_development_kit:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Dpdk (234591b9-64e6-508d-a03a-d1d0843def2d) |
|---|---|
| Product | Data Plane Development Kit (aa359f47-62f1-5bb0-91dd-dcef79c7b211) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/ndragazis/dpdk |
purl2cpe | 2026-06-01 10:14:38.922218 |
pkg:deb/debian/dpdk |
purl2cpe | 2026-06-01 10:14:38.922221 |
pkg:deb/ubuntu/dpdk |
purl2cpe | 2026-06-01 10:14:38.922224 |
pkg:github/dpdk/dpdk |
purl2cpe | 2026-06-01 10:14:38.922227 |
pkg:rpm/centos/dpdk |
purl2cpe | 2026-06-01 10:14:38.922229 |
pkg:rpm/fedora/dpdk |
purl2cpe | 2026-06-01 10:14:38.922232 |
pkg:rpm/opensuse/dpdk |
purl2cpe | 2026-06-01 10:14:38.922235 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-2132 |
vulnerable | 2026-06-08 05:42:50.330203 |
Details available
A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending a crafted Vhost header to DPDK.
Published: 2022-08-31T15:32:58.000Z
Updated: 2024-08-03T00:24:44.195Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0669 |
vulnerable | 2026-06-08 05:39:10.495486 |
Details available
A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected number of fds as ancillary data to VHOST_USER_GET_INFLIGHT_FD / VHOST_USER_SET_INFLIGHT_FD messages that are not closed by the vhost-user slave. By sending such messages continuously, the vhost-user master exhausts available fd in the vhost-user slave process, leading to a denial of service.
Published: 2022-08-29T14:03:04.000Z
Updated: 2024-08-02T23:32:46.442Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3839 |
vulnerable | 2026-06-08 05:33:54.409303 |
Details available
A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inflight.num_queues`, possibly causing out-of-bounds memory read/write. Any software using DPDK vhost library may crash as a result of this vulnerability.
Published: 2022-08-23T15:52:42.000Z
Updated: 2024-08-03T17:09:09.623Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14378 |
vulnerable | 2026-06-08 05:19:23.178300 |
Details available
An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc` function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause `move_desc` to get stuck in a 4,294,967,295-count iteration loop. Depending on how `vhost_crypto` is being used this could prevent other VMs or network tasks from being serviced by the busy DPDK lcore for an extended period.
Published: 2020-09-30T00:00:00.000Z
Updated: 2024-08-04T12:46:33.313Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14377 |
vulnerable | 2026-06-08 05:19:23.177566 |
Details available
A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A complete lack of validation of attacker-controlled parameters can lead to a buffer over read. The results of the over read are then written back to the guest virtual machine memory. This vulnerability can be used by an attacker in a virtual machine to read significant amounts of host memory. The highest threat from this vulnerability is to data confidentiality and system availability.
Published: 2020-09-30T18:53:44.000Z
Updated: 2024-08-04T12:46:33.887Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14376 |
vulnerable | 2026-06-08 05:19:23.176795 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14375 |
vulnerable | 2026-06-08 05:19:23.176119 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14374 |
vulnerable | 2026-06-08 05:19:23.175360 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10726 |
vulnerable | 2026-06-08 05:16:35.743346 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10725 |
vulnerable | 2026-06-08 05:16:35.742818 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10724 |
vulnerable | 2026-06-08 05:16:35.742281 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10723 |
vulnerable | 2026-06-08 05:16:35.741641 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10722 |
vulnerable | 2026-06-08 05:16:35.737047 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14818 |
vulnerable | 2026-06-08 05:12:56.135365 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1059 |
vulnerable | 2026-06-08 05:11:16.783737 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.