OESA-2022-1713

Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2022-1713
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2022-1713.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2022-1713
Upstream
Published
2022-06-17T11:03:53Z
Modified
2025-09-03T06:17:35.198908Z
Summary
dpdk security update
Details

DPDK core includes kernel modules, core libraries and tools. testpmd application allows to test fast packet processing environments on arm64 platforms. For instance, it can be used to check that environment can support fast path applications such as 6WINDGate, pktgen, rumptcpip, etc. More libraries are available as extensions in other packages.

Security Fix(es):

It’s an issue in the handling of vhost-user inflight type messages. A malicious vhost-user master can attach an unexpected number of fds as ancillary data to VHOSTUSERGETINFLIGHTFD / VHOSTUSERSETINFLIGHTFD messages that are not closed by the vhost-user slave. By sending such messages continuously, the vhost-user master could exhaust available fd in the vhost-user slave process and lead to a DoS.(CVE-2022-0669)

In DPDK Vhost communication, we didn’t test if msg->payload.inflight.numqueues is out of bounds in function ‘vhostusersetinflight_fd()’, and could cause the program to write OOB.(CVE-2021-3839)

Database specific
{
    "severity": "Medium"
}
References

Affected packages

openEuler:20.03-LTS-SP1 / dpdk

Package

Name
dpdk
Purl
pkg:rpm/openEuler/dpdk&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
19.11-17.oe1

Ecosystem specific

{
    "noarch": [
        "dpdk-doc-19.11-17.oe1.noarch.rpm"
    ],
    "src": [
        "dpdk-19.11-17.oe1.src.rpm"
    ],
    "x86_64": [
        "dpdk-19.11-17.oe1.x86_64.rpm",
        "dpdk-debuginfo-19.11-17.oe1.x86_64.rpm",
        "dpdk-tools-19.11-17.oe1.x86_64.rpm",
        "dpdk-devel-19.11-17.oe1.x86_64.rpm",
        "dpdk-debugsource-19.11-17.oe1.x86_64.rpm"
    ],
    "aarch64": [
        "dpdk-tools-19.11-17.oe1.aarch64.rpm",
        "dpdk-19.11-17.oe1.aarch64.rpm",
        "dpdk-debuginfo-19.11-17.oe1.aarch64.rpm",
        "dpdk-debugsource-19.11-17.oe1.aarch64.rpm",
        "dpdk-devel-19.11-17.oe1.aarch64.rpm"
    ]
}

openEuler:20.03-LTS-SP3 / dpdk

Package

Name
dpdk
Purl
pkg:rpm/openEuler/dpdk&distro=openEuler-20.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
19.11-17.oe1

Ecosystem specific

{
    "noarch": [
        "dpdk-doc-19.11-17.oe1.noarch.rpm"
    ],
    "src": [
        "dpdk-19.11-17.oe1.src.rpm"
    ],
    "x86_64": [
        "dpdk-tools-19.11-17.oe1.x86_64.rpm",
        "dpdk-19.11-17.oe1.x86_64.rpm",
        "dpdk-devel-19.11-17.oe1.x86_64.rpm",
        "dpdk-debugsource-19.11-17.oe1.x86_64.rpm",
        "dpdk-debuginfo-19.11-17.oe1.x86_64.rpm"
    ],
    "aarch64": [
        "dpdk-debugsource-19.11-17.oe1.aarch64.rpm",
        "dpdk-devel-19.11-17.oe1.aarch64.rpm",
        "dpdk-19.11-17.oe1.aarch64.rpm",
        "dpdk-debuginfo-19.11-17.oe1.aarch64.rpm",
        "dpdk-tools-19.11-17.oe1.aarch64.rpm"
    ]
}

openEuler:22.03-LTS / dpdk

Package

Name
dpdk
Purl
pkg:rpm/openEuler/dpdk&distro=openEuler-22.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
21.11-11.oe2203

Ecosystem specific

{
    "noarch": [
        "dpdk-doc-21.11-11.oe2203.noarch.rpm"
    ],
    "src": [
        "dpdk-21.11-11.oe2203.src.rpm"
    ],
    "x86_64": [
        "dpdk-tools-21.11-11.oe2203.x86_64.rpm",
        "dpdk-devel-21.11-11.oe2203.x86_64.rpm",
        "dpdk-debugsource-21.11-11.oe2203.x86_64.rpm",
        "dpdk-debuginfo-21.11-11.oe2203.x86_64.rpm",
        "dpdk-21.11-11.oe2203.x86_64.rpm"
    ],
    "aarch64": [
        "dpdk-21.11-11.oe2203.aarch64.rpm",
        "dpdk-tools-21.11-11.oe2203.aarch64.rpm",
        "dpdk-devel-21.11-11.oe2203.aarch64.rpm",
        "dpdk-debuginfo-21.11-11.oe2203.aarch64.rpm",
        "dpdk-debugsource-21.11-11.oe2203.aarch64.rpm"
    ]
}