// For flags

CVE-2022-28199

dpdk: error recovery in mlx5 driver not handled properly, allowing for denial of service

Severity Score

6.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.

La distribución de NVIDIA del kit de desarrollo del plano de datos (MLNX_DPDK) contiene una vulnerabilidad en la pila de red, donde la recuperación de errores no es manejada apropiadamente, lo que puede permitir a un atacante remoto causar una denegación de servicio y algún impacto en la integridad y confidencialidad de los datos

A vulnerability was found in the DPDK package. Affected versions of this package are vulnerable to denial of service (DoS) attacks, affecting system availability.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
High
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2022-03-30 CVE Reserved
  • 2022-08-28 CVE Published
  • 2024-04-22 EPSS Updated
  • 2024-08-03 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-20: Improper Input Validation
  • CWE-393: Return of Wrong Status Code
  • CWE-1284: Improper Validation of Specified Quantity in Input
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Nvidia
Search vendor "Nvidia"
 Data Plane Development Kit
Search vendor "Nvidia" for product "Data Plane Development Kit"
 >= 19.11_1.0.0 < 20.11_5.0.0
Search vendor "Nvidia" for product "Data Plane Development Kit" and version " >= 19.11_1.0.0 < 20.11_5.0.0"
-
Affected
in Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
--
Safe
Nvidia
Search vendor "Nvidia"
 Data Plane Development Kit
Search vendor "Nvidia" for product "Data Plane Development Kit"
 >= 19.11_1.0.0 < 20.11_5.0.0
Search vendor "Nvidia" for product "Data Plane Development Kit" and version " >= 19.11_1.0.0 < 20.11_5.0.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
 Windows
Search vendor "Microsoft" for product "Windows"
--
Safe