Approved changes feed: RSS · Atom

cpe:2.3:a:dpdk:data_plane_development_kit:22.03:rc3:*:*:*:*:*:*

part: a version: 22.03 update: rc3

VendorDpdk (234591b9-64e6-508d-a03a-d1d0843def2d)
ProductData Plane Development Kit (aa359f47-62f1-5bb0-91dd-dcef79c7b211)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/ndragazis/dpdk purl2cpe 2026-06-01 10:14:38.923105
pkg:deb/debian/dpdk purl2cpe 2026-06-01 10:14:38.923107
pkg:deb/ubuntu/dpdk purl2cpe 2026-06-01 10:14:38.923108
pkg:github/dpdk/dpdk purl2cpe 2026-06-01 10:14:38.923109
pkg:rpm/centos/dpdk purl2cpe 2026-06-01 10:14:38.923111
pkg:rpm/fedora/dpdk purl2cpe 2026-06-01 10:14:38.923112
pkg:rpm/opensuse/dpdk purl2cpe 2026-06-01 10:14:38.923113

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-0669 vulnerable 2026-06-08 05:39:10.506704 Details available
A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected number of fds as ancillary data to VHOST_USER_GET_INFLIGHT_FD / VHOST_USER_SET_INFLIGHT_FD messages that are not closed by the vhost-user slave. By sending such messages continuously, the vhost-user master exhausts available fd in the vhost-user slave process, leading to a denial of service.
Published: 2022-08-29T14:03:04.000Z
Updated: 2024-08-02T23:32:46.442Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3839 vulnerable 2026-06-08 05:33:54.411078 Details available
A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inflight.num_queues`, possibly causing out-of-bounds memory read/write. Any software using DPDK vhost library may crash as a result of this vulnerability.
Published: 2022-08-23T15:52:42.000Z
Updated: 2024-08-03T17:09:09.623Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.