CVE-2022-2132

    Dashboard / Vulnerabilities / CVE-2022-2132

    CVE-2022-2132

    Published: 31 Aug 2022Last Modified: 12 Aug 2026

    Summary:

    Details: A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending a crafted Vhost header to DPDK.

    References: https://bugs.dpdk.org/show_bug.cgi?id=1031, https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2132.json, https://nvd.nist.gov/vuln/detail/CVE-2022-2132, https://bugzilla.redhat.com/show_bug.cgi?id=2099475, https://lists.debian.org/debian-lts-announce/2022/09/msg00000.html

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -7001c8fdb27357c67147c0a13cb3826e48c0f2bf

    Affected versions

    v21.11-rc4

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-2132 | CVE-DB