Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-3839

Опубликовано: 23 авг. 2022
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate msg->payload.inflight.num_queues, possibly causing out-of-bounds memory read/write. Any software using DPDK vhost library may crash as a result of this vulnerability.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:dpdk:data_plane_development_kit:*:*:*:*:*:*:*:*
Версия до 22.03 (исключая)
cpe:2.3:a:dpdk:data_plane_development_kit:22.03:rc1:*:*:*:*:*:*
cpe:2.3:a:dpdk:data_plane_development_kit:22.03:rc2:*:*:*:*:*:*
cpe:2.3:a:dpdk:data_plane_development_kit:22.03:rc3:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
Конфигурация 3

Одно из

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
Конфигурация 4

Одно из

cpe:2.3:a:redhat:enterprise_linux_fast_datapath:7.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:enterprise_linux_fast_datapath:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 30%
0.00108
Низкий

7.5 High

CVSS3

Дефекты

CWE-125
CWE-125

Связанные уязвимости

ubuntu логотип

CVE-2021-3839

CVSS3: 7.5
ubuntu
почти 3 года назад

A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inflight.num_queues`, possibly causing out-of-bounds memory read/write. Any software using DPDK vhost library may crash as a result of this vulnerability.

redhat логотип

CVE-2021-3839

CVSS3: 7.5
redhat
больше 3 лет назад

A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inflight.num_queues`, possibly causing out-of-bounds memory read/write. Any software using DPDK vhost library may crash as a result of this vulnerability.

debian логотип

CVE-2021-3839

CVSS3: 7.5
debian
почти 3 года назад

A flaw was found in the vhost library in DPDK. Function vhost_user_set ...

github логотип

GHSA-c4mq-4x72-rfxj

CVSS3: 7.5
github
почти 3 года назад

A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inflight.num_queues`, possibly causing out-of-bounds memory read/write. Any software using DPDK vhost library may crash as a result of this vulnerability.

fstec логотип

BDU:2024-07304

CVSS3: 7.5
fstec
почти 6 лет назад

Уязвимость функции vhost_user_set_inflight_fd() набора библиотек и драйверов для быстрой обработки пакетов DPDK, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 30%
0.00108
Низкий

7.5 High

CVSS3

Дефекты

CWE-125
CWE-125