dpdk-21.11-2.el8

エラータID: AXSA:2023-4785:02

Release date: 
Wednesday, January 18, 2023 - 03:04
Subject: 
dpdk-21.11-2.el8
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space.

Security Fix(es):

* dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs (CVE-2022-2132)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2022-2132
A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending a crafted Vhost header to DPDK.

Solution: 

Update packages.

CVEs: 
CVE-2022-2132
A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending a crafted Vhost header to DPDK.
Additional Info: 

N/A

Download: 

SRPMS
  1. dpdk-21.11-2.el8.src.rpm
    MD5: 943d0214e20fe9a996a6d3c51f127bbb
    SHA-256: ed3180a4a2492e4392a88bd98cf30628886973ac8033d08b586a71c50706fd87
    Size: 17.26 MB

Asianux Server 8 for x86_64
  1. dpdk-21.11-2.el8.x86_64.rpm
    MD5: f0e69581bc596564a6081fc22c79ce66
    SHA-256: 017fe541fe81cb039da1b18baca71601d1152d3dcd9b2dfd9f6598af3fcd92e4
    Size: 3.84 MB
  2. dpdk-devel-21.11-2.el8.x86_64.rpm
    MD5: 3643a9b7ff81ba5f4ca40409ae4ecfd1
    SHA-256: 3c75aa99545f1cc5814c69420906bdc5dc0531fe0df0eab220fd7923a8c2edb7
    Size: 1.06 MB
  3. dpdk-doc-21.11-2.el8.noarch.rpm
    MD5: 6415fc6fc3fc0863057d5d75940a8411
    SHA-256: aee69c1b26ac28e385be349bc7c99c0ec49431b8f8188a9f1113bd9dafd754d7
    Size: 13.53 MB
  4. dpdk-tools-21.11-2.el8.x86_64.rpm
    MD5: fc8e2f88833f734636af77fd5bbb9d82
    SHA-256: 2dbba9cf7f0f568a784c7bf87c13968e9f29b2e89e66d14ca0b93b744b12a083
    Size: 39.73 kB