Every CVE Search/ Get API key

CVE-2022-28199

NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in...

6.5 MediumFix available

NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

2.32%Up 1.3 points since Sep 2, 2022
90%50%10%1%

What each source reports

CVE List Score used 6.5

NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.

Record
CVE-2022-28199
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-1284
Updated
2026-11-02
EUVDEUVD-2022-32653 6.5

NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.

Record
EUVD-2022-32653
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-x5mv-h4g3-j3r2 6.5

NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in...

NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.

Record
GHSA-x5mv-h4g3-j3r2
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-20
Updated
2026-11-02
NVD 6.5

NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.

Record
CVE-2022-28199
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Weakness
CWE-1284, CWE-20
Updated
2026-11-02
OSV 6.5

NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.

Record
CVE-2022-28199
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2022-1965 8.6

dpdk security update

DPDK core includes kernel modules, core libraries and tools.testpmd application allows to test fast packet processing environments on arm64 platforms. For instance, it can be used to check that environment can support fast path applications such as 6WINDGate, pktgen, rumptcpip, etc. More libraries are available as extensions in other packages.

Security Fix(es):

NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.(CVE-2022-28199)

Record
OESA-2022-1965
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
Show 13 moreShow less
OSVRHSA-2022:6502 6.5

Red Hat Security Advisory: openvswitch2.13 security update

Record
RHSA-2022:6502
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:6503 6.5

Red Hat Security Advisory: openvswitch2.17 security update

Record
RHSA-2022:6503
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:6504 6.5

Red Hat Security Advisory: openvswitch2.17 security update

Record
RHSA-2022:6504
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:6505 6.5

Red Hat Security Advisory: openvswitch2.15 security update

Record
RHSA-2022:6505
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:6506 6.5

Red Hat Security Advisory: openvswitch2.16 security update

Record
RHSA-2022:6506
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:8263 8.6

Red Hat Security Advisory: dpdk security and bug fix update

Record
RHSA-2022:8263
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2022:8263 8.6

Important: dpdk security and bug fix update

The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space.

Security Fix(es):

  • dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs (CVE-2022-2132)

  • DPDK: out-of-bounds read/write in vhost_user_set_inflight_fd() may lead to crash (CVE-2021-3839)

  • dpdk: error recovery in mlx5 driver not handled properly, allowing for denial of service (CVE-2022-28199)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.

Record
RLSA-2022:8263
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-28199 8.6

NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.

Record
UBUNTU-CVE-2022-28199
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2022:8263 No score

Important: dpdk security and bug fix update

The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space.

Security Fix(es):

  • dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs (CVE-2022-2132)
  • DPDK: out-of-bounds read/write in vhost_user_set_inflight_fd() may lead to crash (CVE-2021-3839)
  • dpdk: error recovery in mlx5 driver not handled properly, allowing for denial of service (CVE-2022-28199)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2022:8263
Updated
2026-11-02
OSVDEBIAN-CVE-2022-28199 No score

NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.

Record
DEBIAN-CVE-2022-28199
Updated
2026-11-03
OSVSUSE-SU-2022:3341-1 No score

Security update for dpdk

This update for dpdk fixes the following issues:

  • CVE-2022-2132: Fixed DoS when a vhost header crosses more than two descriptors and exhausts all mbufs (bsc#1202903).
  • CVE-2022-28199: Fixed buffer overflow in the vhost code (bsc#1202956).
Record
SUSE-SU-2022:3341-1
Updated
2026-11-02
OSVSUSE-SU-2022:3390-1 No score

Security update for dpdk

This update for dpdk fixes the following issues:

  • CVE-2022-2132: Fixed DoS when a vhost header crosses more than two descriptors and exhausts all mbufs (bsc#1202903).
  • CVE-2022-28199: Fixed buffer overflow in the vhost code (bsc#1202956).
Record
SUSE-SU-2022:3390-1
Updated
2026-11-02
OSVSUSE-SU-2022:3429-1 No score

Security update for dpdk

This update for dpdk fixes the following issues:

  • CVE-2022-2132: Fixed DoS when a vhost header crosses more than two descriptors and exhausts all mbufs (bsc#1202903).
  • CVE-2022-28199: Fixed buffer overflow in the vhost code (bsc#1202956).
Record
SUSE-SU-2022:3429-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
dpdk
AlmaLinux:9
From an advisory covering 3 CVEs
before 2:21.11.2-1.el9_1
2:21.11.2-1.el9_1
dpdk-devel
AlmaLinux:9
From an advisory covering 3 CVEs
before 2:21.11.2-1.el9_1
2:21.11.2-1.el9_1
dpdk-doc
AlmaLinux:9
From an advisory covering 3 CVEs
before 2:21.11.2-1.el9_1
2:21.11.2-1.el9_1
dpdk-tools
AlmaLinux:9
From an advisory covering 3 CVEs
before 2:21.11.2-1.el9_1
2:21.11.2-1.el9_1
dpdk
Debian:12
before 22.11.1-2
22.11.1-2
dpdk
Debian:13
before 22.11.1-2
22.11.1-2
dpdk
Debian:14
before 22.11.1-2
22.11.1-2
dpdk
Debian:11
From an advisory covering 2 CVEs
before 20.11.6-1~deb11u1, plus listed versions
20.11-720.11.1-120.11.1-220.11.1-320.11.1-4
Show 9 moreShow less
20.11.2-120.11.3-120.11.3-1~deb11u120.11.3-220.11.4-120.11.4-220.11.4-2~deb11u120.11.5-120.11.5-1~deb11u1
20.11.6-1~deb11u1
dpdk
openEuler:20.03-LTS-SP1
before 19.11-20.oe1
19.11-20.oe1
dpdk
openEuler:20.03-LTS-SP3
before 19.11-20.oe1
19.11-20.oe1
Show 75 moreShow less
Affected packages
PackageAffectedFixed
dpdk
openEuler:22.03-LTS
before 21.11-17.oe2203
21.11-17.oe2203
network-scripts-openvswitch2.13
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.13.0-193.3.el8fdp
0:2.13.0-193.3.el8fdp
openvswitch2.13
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.13.0-193.3.el8fdp
0:2.13.0-193.3.el8fdp
openvswitch2.13-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.13.0-193.3.el8fdp
0:2.13.0-193.3.el8fdp
openvswitch2.13-debugsource
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.13.0-193.3.el8fdp
0:2.13.0-193.3.el8fdp
openvswitch2.13-devel
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.13.0-193.3.el8fdp
0:2.13.0-193.3.el8fdp
openvswitch2.13-ipsec
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.13.0-193.3.el8fdp
0:2.13.0-193.3.el8fdp
openvswitch2.13-test
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.13.0-193.3.el8fdp
0:2.13.0-193.3.el8fdp
python3-openvswitch2.13
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.13.0-193.3.el8fdp
0:2.13.0-193.3.el8fdp
python3-openvswitch2.13-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.13.0-193.3.el8fdp
0:2.13.0-193.3.el8fdp
openvswitch2.17
Red Hat:enterprise_linux:9::fastdatapath
before 0:2.17.0-32.4.el9fdp
0:2.17.0-32.4.el9fdp
openvswitch2.17-debuginfo
Red Hat:enterprise_linux:9::fastdatapath
before 0:2.17.0-32.4.el9fdp
0:2.17.0-32.4.el9fdp
openvswitch2.17-debugsource
Red Hat:enterprise_linux:9::fastdatapath
before 0:2.17.0-32.4.el9fdp
0:2.17.0-32.4.el9fdp
openvswitch2.17-devel
Red Hat:enterprise_linux:9::fastdatapath
before 0:2.17.0-32.4.el9fdp
0:2.17.0-32.4.el9fdp
openvswitch2.17-ipsec
Red Hat:enterprise_linux:9::fastdatapath
before 0:2.17.0-32.4.el9fdp
0:2.17.0-32.4.el9fdp
openvswitch2.17-test
Red Hat:enterprise_linux:9::fastdatapath
before 0:2.17.0-32.4.el9fdp
0:2.17.0-32.4.el9fdp
python3-openvswitch2.17
Red Hat:enterprise_linux:9::fastdatapath
before 0:2.17.0-32.4.el9fdp
0:2.17.0-32.4.el9fdp
python3-openvswitch2.17-debuginfo
Red Hat:enterprise_linux:9::fastdatapath
before 0:2.17.0-32.4.el9fdp
0:2.17.0-32.4.el9fdp
network-scripts-openvswitch2.17
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.17.0-37.4.el8fdp
0:2.17.0-37.4.el8fdp
openvswitch2.17
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.17.0-37.4.el8fdp
0:2.17.0-37.4.el8fdp
openvswitch2.17-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.17.0-37.4.el8fdp
0:2.17.0-37.4.el8fdp
openvswitch2.17-debugsource
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.17.0-37.4.el8fdp
0:2.17.0-37.4.el8fdp
openvswitch2.17-devel
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.17.0-37.4.el8fdp
0:2.17.0-37.4.el8fdp
openvswitch2.17-ipsec
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.17.0-37.4.el8fdp
0:2.17.0-37.4.el8fdp
openvswitch2.17-test
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.17.0-37.4.el8fdp
0:2.17.0-37.4.el8fdp
python3-openvswitch2.17
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.17.0-37.4.el8fdp
0:2.17.0-37.4.el8fdp
python3-openvswitch2.17-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.17.0-37.4.el8fdp
0:2.17.0-37.4.el8fdp
network-scripts-openvswitch2.15
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.15.0-113.3.el8fdp
0:2.15.0-113.3.el8fdp
openvswitch2.15
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.15.0-113.3.el8fdp
0:2.15.0-113.3.el8fdp
openvswitch2.15-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.15.0-113.3.el8fdp
0:2.15.0-113.3.el8fdp
openvswitch2.15-debugsource
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.15.0-113.3.el8fdp
0:2.15.0-113.3.el8fdp
openvswitch2.15-devel
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.15.0-113.3.el8fdp
0:2.15.0-113.3.el8fdp
openvswitch2.15-ipsec
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.15.0-113.3.el8fdp
0:2.15.0-113.3.el8fdp
openvswitch2.15-test
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.15.0-113.3.el8fdp
0:2.15.0-113.3.el8fdp
python3-openvswitch2.15
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.15.0-113.3.el8fdp
0:2.15.0-113.3.el8fdp
python3-openvswitch2.15-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.15.0-113.3.el8fdp
0:2.15.0-113.3.el8fdp
network-scripts-openvswitch2.16
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.16.0-89.3.el8fdp
0:2.16.0-89.3.el8fdp
openvswitch2.16
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.16.0-89.3.el8fdp
0:2.16.0-89.3.el8fdp
openvswitch2.16-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.16.0-89.3.el8fdp
0:2.16.0-89.3.el8fdp
openvswitch2.16-debugsource
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.16.0-89.3.el8fdp
0:2.16.0-89.3.el8fdp
openvswitch2.16-devel
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.16.0-89.3.el8fdp
0:2.16.0-89.3.el8fdp
openvswitch2.16-ipsec
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.16.0-89.3.el8fdp
0:2.16.0-89.3.el8fdp
openvswitch2.16-test
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.16.0-89.3.el8fdp
0:2.16.0-89.3.el8fdp
python3-openvswitch2.16
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.16.0-89.3.el8fdp
0:2.16.0-89.3.el8fdp
python3-openvswitch2.16-debuginfo
Red Hat:enterprise_linux:8::fastdatapath
before 0:2.16.0-89.3.el8fdp
0:2.16.0-89.3.el8fdp
dpdk
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 2:21.11.2-1.el9_1
2:21.11.2-1.el9_1
dpdk-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 2:21.11.2-1.el9_1
2:21.11.2-1.el9_1
dpdk-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 2:21.11.2-1.el9_1
2:21.11.2-1.el9_1
dpdk-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 2:21.11.2-1.el9_1
2:21.11.2-1.el9_1
dpdk-doc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 2:21.11.2-1.el9_1
2:21.11.2-1.el9_1
dpdk-tools
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 2:21.11.2-1.el9_1
2:21.11.2-1.el9_1
dpdk
Rocky Linux:9
From an advisory covering 3 CVEs
before 2:21.11.2-1.el9_1
2:21.11.2-1.el9_1
dpdk
SUSE:Linux Enterprise Module for Server Applications 15 SP4
From an advisory covering 2 CVEs
before 19.11.10-150400.4.7.1
19.11.10-150400.4.7.1
dpdk-thunderx
SUSE:Linux Enterprise Module for Server Applications 15 SP4
From an advisory covering 2 CVEs
before 19.11.10-150400.4.7.1
19.11.10-150400.4.7.1
dpdk
openSUSE:Leap 15.4
From an advisory covering 2 CVEs
before 19.11.10-150400.4.7.1
19.11.10-150400.4.7.1
dpdk-thunderx
openSUSE:Leap 15.4
From an advisory covering 2 CVEs
before 19.11.10-150400.4.7.1
19.11.10-150400.4.7.1
dpdk
SUSE:Linux Enterprise Module for Server Applications 15 SP3
From an advisory covering 2 CVEs
before 19.11.4-150300.16.1
19.11.4-150300.16.1
dpdk-thunderx
SUSE:Linux Enterprise Module for Server Applications 15 SP3
From an advisory covering 2 CVEs
before 19.11.4-150300.16.1
19.11.4-150300.16.1
dpdk
openSUSE:Leap 15.3
From an advisory covering 2 CVEs
before 19.11.4-150300.16.1
19.11.4-150300.16.1
dpdk-thunderx
openSUSE:Leap 15.3
From an advisory covering 2 CVEs
before 19.11.4-150300.16.1
19.11.4-150300.16.1
dpdk
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
From an advisory covering 2 CVEs
before 19.11.4-150200.3.20.1
19.11.4-150200.3.20.1
dpdk-thunderx
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
From an advisory covering 2 CVEs
before 19.11.4-150200.3.20.1
19.11.4-150200.3.20.1
dpdk
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 2 CVEs
before 19.11.4-150200.3.20.1
19.11.4-150200.3.20.1
dpdk-thunderx
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 2 CVEs
before 19.11.4-150200.3.20.1
19.11.4-150200.3.20.1
dpdk
SUSE:Linux Enterprise Server 15 SP2-BCL
From an advisory covering 2 CVEs
before 19.11.4-150200.3.20.1
19.11.4-150200.3.20.1
dpdk
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 2 CVEs
before 19.11.4-150200.3.20.1
19.11.4-150200.3.20.1
dpdk-thunderx
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 2 CVEs
before 19.11.4-150200.3.20.1
19.11.4-150200.3.20.1
dpdk
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 2 CVEs
before 19.11.4-150200.3.20.1
19.11.4-150200.3.20.1
dpdk
SUSE:Manager Proxy 4.1
From an advisory covering 2 CVEs
before 19.11.4-150200.3.20.1
19.11.4-150200.3.20.1
dpdk
SUSE:Manager Retail Branch Server 4.1
From an advisory covering 2 CVEs
before 19.11.4-150200.3.20.1
19.11.4-150200.3.20.1
dpdk
SUSE:Manager Server 4.1
From an advisory covering 2 CVEs
before 19.11.4-150200.3.20.1
19.11.4-150200.3.20.1
dpdk
SUSE:Enterprise Storage 7
From an advisory covering 2 CVEs
before 19.11.4-150200.3.20.1
19.11.4-150200.3.20.1
dpdk-thunderx
SUSE:Enterprise Storage 7
From an advisory covering 2 CVEs
before 19.11.4-150200.3.20.1
19.11.4-150200.3.20.1
dpdk
Ubuntu:20.04:LTS
before 19.11.13-0ubuntu0.20.04.1, plus listed versions
18.11.2-418.11.3-118.11.4-118.11.4-1ubuntu118.11.5-1
Show 11 moreShow less
19.11-2ubuntu119.11-2ubuntu219.11.1-0ubuntu119.11.1-0ubuntu1.119.11.3-0ubuntu0.119.11.3-0ubuntu0.219.11.6-0ubuntu0.20.04.119.11.7-0ubuntu0.20.04.119.11.7-0ubuntu0.20.04.219.11.10-0ubuntu0.20.04.119.11.12-0ubuntu0.20.04.1
19.11.13-0ubuntu0.20.04.1
dpdk
Ubuntu:22.04:LTS
before 21.11.2-0ubuntu0.22.04.1, plus listed versions
20.11.3-0ubuntu120.11.3-0ubuntu321.11-121.11-1build121.11.1-0ubuntu0.3
21.11.2-0ubuntu0.22.04.1

History

History
RecordedChangedSources
affected, factsOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-28199 is a medium vulnerability (CVSS 6.5) in Nvidia Data Plane Development Kit, published August 30, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.32%, the 83rd percentile. Fixed in dpdk 22.11.1-2.

References

Show 44 moreShow less
MoveEnter Open