- Vulnerability/
- RHSA-2023:0168
RHSA-2023:0168: Important: dpdk security update
First published: Mon Jan 16 2023(Updated: )
The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space.<br>Security Fix(es):<br><li> dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs (CVE-2022-2132)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/dpdk | <18.11.2-5.el8_1 | 18.11.2-5.el8_1 |
| redhat/dpdk | <18.11.2-5.el8_1 | 18.11.2-5.el8_1 |
| redhat/dpdk-debuginfo | <18.11.2-5.el8_1 | 18.11.2-5.el8_1 |
| redhat/dpdk-debugsource | <18.11.2-5.el8_1 | 18.11.2-5.el8_1 |
| redhat/dpdk-devel | <18.11.2-5.el8_1 | 18.11.2-5.el8_1 |
| redhat/dpdk-devel-debuginfo | <18.11.2-5.el8_1 | 18.11.2-5.el8_1 |
| redhat/dpdk-doc | <18.11.2-5.el8_1 | 18.11.2-5.el8_1 |
| redhat/dpdk-tools | <18.11.2-5.el8_1 | 18.11.2-5.el8_1 |
| redhat/dpdk | <18.11.2-5.el8_1 | 18.11.2-5.el8_1 |
| redhat/dpdk-debuginfo | <18.11.2-5.el8_1 | 18.11.2-5.el8_1 |
| redhat/dpdk-debugsource | <18.11.2-5.el8_1 | 18.11.2-5.el8_1 |
| redhat/dpdk-devel | <18.11.2-5.el8_1 | 18.11.2-5.el8_1 |
| redhat/dpdk-devel-debuginfo | <18.11.2-5.el8_1 | 18.11.2-5.el8_1 |
| redhat/dpdk-tools | <18.11.2-5.el8_1 | 18.11.2-5.el8_1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for the DPDK DoS issue?
The vulnerability ID for the DPDK DoS issue is RHSA-2023:0168.
What is the severity of RHSA-2023:0168?
RHSA-2023:0168 is classified as important due to the potential for denial-of-service attacks.
How do I fix the vulnerability identified by RHSA-2023:0168?
To fix the vulnerability identified by RHSA-2023:0168, upgrade to the dpdk package version 18.11.2-5.el8_1 or later.
What component is affected by the vulnerability RHSA-2023:0168?
The vulnerability RHSA-2023:0168 affects the Data Plane Development Kit (DPDK) packages.
What threat does CVE-2022-2132 associated with RHSA-2023:0168 pose?
CVE-2022-2132 associated with RHSA-2023:0168 poses a threat of denial-of-service when a Vhost header crosses more than two descriptors.
- agent/severity
- agent/type
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2023:0168
- agent/software-canonical-lookup
- agent/remedy
- agent/references
- agent/title
- agent/description
- agent/event
- agent/trending
- agent/tags
- agent/source
- package-manager/redhat