The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0172 advisory.

    The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast     packet processing in the user space.

    Security Fix(es):

    * dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs (CVE-2022-2132)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0531-1 advisory.

    - Fixed a regression caused by incomplete fix for CVE-2022-2132 (bsc#1219187).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0576-1 advisory.

    - Fixed a regression caused by incomplete fix for CVE-2022-2132 (bsc#1219187).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5000:03 advisory.

    * dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs (CVE-2022-2132)
      * DPDK: out-of-bounds read/write in vhost_user_set_inflight_fd() may lead to crash (CVE-2021-3839)
      * dpdk: error recovery in mlx5 driver not handled properly, allowing for denial of service     (CVE-2022-28199)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-2026_0036 advisory.

    This advisory aggregates security fixes for the dpdk SRPM in CIQ LTS 8.6. It addresses 1 CVE:
    CVE-2022-2132.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:6384 advisory.

    Open vSwitch provides standard network bridging functions and support for     the OpenFlow protocol for remote per-flow control of traffic.

    Security Fix(es):

    * dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs (CVE-2022-2132)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:6385 advisory.

    Open vSwitch provides standard network bridging functions and support for     the OpenFlow protocol for remote per-flow control of traffic.

    Security Fix(es):

    * dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs (CVE-2022-2132)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:6850 advisory.

    Open vSwitch provides standard network bridging functions and support for     the OpenFlow protocol for remote per-flow control of traffic.

    Security Fix(es):

    * dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs (CVE-2022-2132)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the dpdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a     denial of service triggered by sending a crafted Vhost header to DPDK. (CVE-2022-2132)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0168 advisory.

    The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast     packet processing in the user space.

    Security Fix(es):

    * dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs (CVE-2022-2132)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-0171 advisory.

    [21.11-2]
    - Backport fixes for CVE-2022-2132 (#2107171)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:0171 advisory.

  - A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a     denial of service triggered by sending a crafted Vhost header to DPDK. (CVE-2022-2132)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the spdk package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a     denial of service triggered by sending a crafted Vhost header to DPDK. (CVE-2022-2132)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0554-1 advisory.

    - Fixed a regression caused by incomplete fix for CVE-2022-2132 (bsc#1219187).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
170071	RHEL 9 : dpdk (RHSA-2023:0172)	Nessus	Red Hat Local Security Checks	2023/1/16	2024/11/7	high
190752	SUSE SLES15: dpdk / dpdk-devel / dpdk-kmp-default / dpdk-thunderx / etc (SUSE-SU-2024:0531-1)	Nessus	SuSE Local Security Checks	2024/2/20	2026/6/26	high
190880	SUSE SLES15: dpdk / dpdk-devel / dpdk-kmp-default / dpdk-thunderx / etc (SUSE-SU-2024:0576-1)	Nessus	SuSE Local Security Checks	2024/2/22	2026/6/25	high
291869	MiracleLinux 9 : dpdk-21.11.2-1.el9 (AXSA:2023-5000:03)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
359100	Rocky Linux 8.6 [CIQ] Security Update: dpdk / dpdk-debuginfo / dpdk-debugsource / dpdk-devel / dpdk-tools (ciqsa-2026_0036)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
164833	RHEL 8 : openvswitch2.13 (RHSA-2022:6384)	Nessus	Red Hat Local Security Checks	2022/9/7	2024/11/7	high
164834	RHEL 8 : openvswitch2.15 (RHSA-2022:6385)	Nessus	Red Hat Local Security Checks	2022/9/7	2024/11/7	high
165739	RHEL 7 : openvswitch2.11 (RHSA-2022:6850)	Nessus	Red Hat Local Security Checks	2022/10/6	2024/11/8	high
168528	EulerOS 2.0 SP8 : dpdk (EulerOS-SA-2022-2793)	Nessus	Huawei Local Security Checks	2022/12/8	2023/9/20	high
170075	RHEL 8 : dpdk (RHSA-2023:0168)	Nessus	Red Hat Local Security Checks	2023/1/16	2024/11/7	high
170092	Oracle Linux 8 : dpdk (ELSA-2023-0171)	Nessus	Oracle Linux Local Security Checks	2023/1/16	2024/10/24	high
184976	Rocky Linux 8 : dpdk (RLSA-2023:0171)	Nessus	Rocky Linux Local Security Checks	2023/11/7	2023/11/7	high
188636	EulerOS Virtualization 2.11.1 : spdk (EulerOS-SA-2023-3372)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	high
190831	SUSE SLES12: dpdk / dpdk-devel / dpdk-kmp-default / dpdk-thunderx / etc (SUSE-SU-2024:0554-1)	Nessus	SuSE Local Security Checks	2024/2/21	2026/6/25	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high

high

high

high

high

high

high