Network Stack Vulnerability in NVIDIA Data Plane Development Kit
CVE-2022-28199

6.5MEDIUM

Key Information:

Vendor

Nvidia
Status
Nvidia Flare
Vendor
CVE Published:
1 September 2022

What is CVE-2022-28199?

NVIDIA's Data Plane Development Kit has a vulnerability in its network stack that inadequately handles error recovery. This flaw can be exploited by a remote attacker, leading to potential denial of service. Additionally, this vulnerability poses some risk to data integrity and confidentiality, making it critical for users to address this issue promptly.

Affected Version(s)

NVIDIA FLARE mlnx_dpdk_19.11_1.*.* through mlnx_dpdk_20.11_1.0.0-4.*.*

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5389
x_refsource_MISC
http://www.openwall.com/lists/oss-security/2022/09/06/2
mailing-listx_refsource_MLIST
https://tools.cisco.com/security/center/content/CiscoSecu...
vendor-advisoryx_refsource_CISCO

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.