Storage Performance Development Kit
Approved changes feed: RSS · Atom
cpe:2.3:a:spdk:storage_performance_development_kit:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Spdk (10891b05-24d4-5962-bc1f-c066ad180310) |
|---|---|
| Product | Storage Performance Development Kit (4bc824ea-5b08-5670-ab90-0a190cb43a12) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/ndragazis/spdk |
purl2cpe | 2026-06-01 10:15:31.843245 |
pkg:github/spdk/spdk |
purl2cpe | 2026-06-01 10:15:31.843249 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-28361 |
vulnerable | 2026-06-08 05:31:24.139580 |
Details available
An issue was discovered in Storage Performance Development Kit (SPDK) before 20.01.01. If a PDU is sent to the iSCSI target with a zero length (but data is expected), the iSCSI target can crash with a NULL pointer dereference.
Published: 2021-03-13T19:00:31.000Z
Updated: 2024-08-03T21:40:14.251Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9547 |
vulnerable | 2026-06-08 05:14:25.695711 |
Details available
In Storage Performance Development Kit (SPDK) before 19.01, a malicious vhost client (i.e., virtual machine) could carefully construct a circular descriptor chain that would result in a partial denial of service in the SPDK vhost target, because the vhost target did not properly detect such chains.
Published: 2019-03-01T22:00:00.000Z
Updated: 2024-09-16T18:33:40.475Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14940 |
vulnerable | 2026-06-08 05:12:56.447481 |
Details available
In Storage Performance Development Kit (SPDK) before 19.07, a user of a vhost can cause a crash if the target is sent invalid input.
Published: 2019-08-12T01:36:19.000Z
Updated: 2024-08-05T00:34:52.971Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.