Approved changes feed: RSS · Atom

cpe:2.3:a:dpdk:data_plane_development_kit:22.03:rc1:*:*:*:*:*:*

part: a version: 22.03 update: rc1

VendorDpdk (234591b9-64e6-508d-a03a-d1d0843def2d)
ProductData Plane Development Kit (aa359f47-62f1-5bb0-91dd-dcef79c7b211)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/ndragazis/dpdk purl2cpe 2026-06-01 10:14:38.923086
pkg:deb/debian/dpdk purl2cpe 2026-06-01 10:14:38.923087
pkg:deb/ubuntu/dpdk purl2cpe 2026-06-01 10:14:38.923088
pkg:github/dpdk/dpdk purl2cpe 2026-06-01 10:14:38.923090
pkg:rpm/centos/dpdk purl2cpe 2026-06-01 10:14:38.923091
pkg:rpm/fedora/dpdk purl2cpe 2026-06-01 10:14:38.923093
pkg:rpm/opensuse/dpdk purl2cpe 2026-06-01 10:14:38.923094

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-0669 vulnerable 2026-06-08 05:39:10.505196 Details available
A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected number of fds as ancillary data to VHOST_USER_GET_INFLIGHT_FD / VHOST_USER_SET_INFLIGHT_FD messages that are not closed by the vhost-user slave. By sending such messages continuously, the vhost-user master exhausts available fd in the vhost-user slave process, leading to a denial of service.
Published: 2022-08-29T14:03:04.000Z
Updated: 2024-08-02T23:32:46.442Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3839 vulnerable 2026-06-08 05:33:54.409900 Details available
A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inflight.num_queues`, possibly causing out-of-bounds memory read/write. Any software using DPDK vhost library may crash as a result of this vulnerability.
Published: 2022-08-23T15:52:42.000Z
Updated: 2024-08-03T17:09:09.623Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.