Error Handling in DPDK - CVE-2022-28199

Vulnerability identifier: #VU66809

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-28199

CWE-ID: CWE-388

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to incorrect error handling of data within the mlx5 driver. A remote guest can send specially crafted packets to the application and perform a denial of service (DoS) attack.

DPDK
Oracle Linux
Debian Linux
SUSE Manager Proxy
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Enterprise Storage
SUSE Linux Enterprise Storage
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Module for Server Applications
openSUSE Leap
openEuler
openvswitch2.13 (Red Hat package)
openvswitch2.15 (Red Hat package)
openvswitch2.16 (Red Hat package)
openvswitch2.17 (Red Hat package)
dpdk-kmp-default-debuginfo
dpdk-thunderx-kmp-default-debuginfo
dpdk-kmp-default
dpdk-thunderx-kmp-default
dpdk-thunderx-kmp-preempt
dpdk-thunderx-kmp-preempt-debuginfo
dpdk-kmp-preempt-debuginfo
dpdk-kmp-preempt
dpdk-thunderx-devel
dpdk
dpdk-debuginfo
dpdk-debugsource
dpdk-devel
dpdk-devel-debuginfo
dpdk-thunderx-devel-debuginfo
dpdk-tools
dpdk-tools-debuginfo
libdpdk-20_0
libdpdk-20_0-debuginfo
dpdk-thunderx
dpdk-thunderx-debuginfo
dpdk-thunderx-debugsource
dpdk-thunderx-examples
dpdk-thunderx-examples-debuginfo
dpdk-thunderx-tools
dpdk-thunderx-tools-debuginfo
dpdk-doc
dpdk-thunderx-doc
dpdk-examples
dpdk-examples-debuginfo
dpdk (Debian package)
dpdk (Red Hat package)
Red Hat OpenShift Container Platform
Cisco Firepower Threat Defense Virtual (FTDv)
Red Hat Enterprise Linux Fast Datapath
Oracle Communications Session Border Controller
Cisco Adaptive Security Virtual Appliance (ASAv)
Catalyst 8000V Edge Software
Data Plane Development Kit (MLNX_DPDK)

Install updates from vendor's website.

DPDK - addressed in versions 19.11.13, 20.11.6, 21.11.2
openvswitch2.13 (Red Hat package) - update to 2.13.0-193.3.el8fdp
openvswitch2.15 (Red Hat package) - update to 2.15.0-113.3.el8fdp
openvswitch2.16 (Red Hat package) - update to 2.16.0-89.3.el8fdp
openvswitch2.17 (Red Hat package) - addressed in versions 2.17.0-32.4.el9fdp, 2.17.0-37.4.el8fdp
Red Hat OpenShift Container Platform - update to 4.11.5
Cisco Firepower Threat Defense Virtual (FTDv) - addressed in versions 7.1.0.3, 7.2.1, 7.3
Cisco Adaptive Security Virtual Appliance (ASAv) - addressed in versions 9.17.1, 9.18.2, 9.19
Catalyst 8000V Edge Software - addressed in versions 17.6.4, 17.7.2, 17.9.1
dpdk-kmp-default-debuginfo - addressed in versions 19.11.4_k5.3.18_150200.24.126-150200.3.20.1, 19.11.4_k5.3.18_150300.59.93-150300.16.1, 19.11.10_k5.14.21_150400.24.18-150400.4.7.1
dpdk-thunderx-kmp-default-debuginfo - addressed in versions 19.11.4_k5.3.18_150200.24.126-150200.3.20.1, 19.11.4_k5.3.18_150300.59.93-150300.16.1, 19.11.10_k5.14.21_150400.24.18-150400.4.7.1
dpdk-kmp-default - addressed in versions 19.11.4_k5.3.18_150200.24.126-150200.3.20.1, 19.11.4_k5.3.18_150300.59.93-150300.16.1, 19.11.10_k5.14.21_150400.24.18-150400.4.7.1
dpdk-thunderx-kmp-default - addressed in versions 19.11.4_k5.3.18_150200.24.126-150200.3.20.1, 19.11.4_k5.3.18_150300.59.93-150300.16.1, 19.11.10_k5.14.21_150400.24.18-150400.4.7.1
dpdk-thunderx-kmp-preempt - update to 19.11.4_k5.3.18_150300.59.93-150300.16.1
dpdk-thunderx-kmp-preempt-debuginfo - update to 19.11.4_k5.3.18_150300.59.93-150300.16.1
dpdk-kmp-preempt-debuginfo - update to 19.11.4_k5.3.18_150300.59.93-150300.16.1
dpdk-kmp-preempt - update to 19.11.4_k5.3.18_150300.59.93-150300.16.1
dpdk-thunderx-devel - addressed in versions 19.11.4-150200.3.20.1, 19.11.4-150300.16.1, 19.11.10-150400.4.7.1
dpdk - addressed in versions 19.11.4-150200.3.20.1, 19.11.4-150300.16.1, 19.11.10-150400.4.7.1
dpdk-debuginfo - addressed in versions 19.11.4-150200.3.20.1, 19.11.4-150300.16.1, 19.11.10-150400.4.7.1
dpdk-debugsource - addressed in versions 19.11.4-150200.3.20.1, 19.11.4-150300.16.1, 19.11.10-150400.4.7.1
dpdk-devel - addressed in versions 19.11.4-150200.3.20.1, 19.11.4-150300.16.1, 19.11.10-150400.4.7.1
dpdk-devel-debuginfo - addressed in versions 19.11.4-150200.3.20.1, 19.11.4-150300.16.1, 19.11.10-150400.4.7.1
dpdk-thunderx-devel-debuginfo - addressed in versions 19.11.4-150200.3.20.1, 19.11.4-150300.16.1, 19.11.10-150400.4.7.1
dpdk-tools - addressed in versions 19.11.4-150200.3.20.1, 19.11.4-150300.16.1, 19.11.10-150400.4.7.1
dpdk-tools-debuginfo - addressed in versions 19.11.4-150200.3.20.1, 19.11.4-150300.16.1, 19.11.10-150400.4.7.1
libdpdk-20_0 - addressed in versions 19.11.4-150200.3.20.1, 19.11.4-150300.16.1, 19.11.10-150400.4.7.1
libdpdk-20_0-debuginfo - addressed in versions 19.11.4-150200.3.20.1, 19.11.4-150300.16.1, 19.11.10-150400.4.7.1
dpdk-thunderx - addressed in versions 19.11.4-150200.3.20.1, 19.11.4-150300.16.1, 19.11.10-150400.4.7.1
dpdk-thunderx-debuginfo - addressed in versions 19.11.4-150200.3.20.1, 19.11.4-150300.16.1, 19.11.10-150400.4.7.1
dpdk-thunderx-debugsource - addressed in versions 19.11.4-150200.3.20.1, 19.11.4-150300.16.1, 19.11.10-150400.4.7.1
dpdk-thunderx-examples - addressed in versions 19.11.4-150300.16.1, 19.11.10-150400.4.7.1
dpdk-thunderx-examples-debuginfo - addressed in versions 19.11.4-150300.16.1, 19.11.10-150400.4.7.1
dpdk-thunderx-tools - addressed in versions 19.11.4-150300.16.1, 19.11.10-150400.4.7.1
dpdk-thunderx-tools-debuginfo - addressed in versions 19.11.4-150300.16.1, 19.11.10-150400.4.7.1
dpdk-doc - addressed in versions 19.11.4-150300.16.1, 19.11.10-150400.4.7.1
dpdk-thunderx-doc - addressed in versions 19.11.4-150300.16.1, 19.11.10-150400.4.7.1
dpdk-examples - addressed in versions 19.11.4-150300.16.1, 19.11.10-150400.4.7.1
dpdk-examples-debuginfo - addressed in versions 19.11.4-150300.16.1, 19.11.10-150400.4.7.1
dpdk-tools - update to 19.11-20
dpdk-doc - update to 19.11-20
dpdk-debuginfo - update to 19.11-20
dpdk-debugsource - update to 19.11-20
dpdk-devel - update to 19.11-20
dpdk - update to 19.11-20
Data Plane Development Kit (MLNX_DPDK) - update to 20.11_5.0.0
dpdk (Debian package) - update to 20.11.6-1~deb11u1
dpdk (Red Hat package) - update to 21.11.2-1.el9_1

• https://nvidia.custhelp.com/app/answers/detail/a_id/5389
• https://bugs.dpdk.org/show_bug.cgi?id=1031
• https://git.dpdk.org/dpdk/commit/?id=60b254e3923d007bcadbb8d410f95ad89a2f13fa
• https://www.openwall.com/lists/oss-security/2022/08/29/3

• Denial of service in NVIDIA Data Plane Development Kit
• Multiple vulnerabilities in DPDK
• Debian update for dpdk
• Denial of service in Cisco Products
• Red Hat Enterprise Linux Fast Datapath 8 update for openvswitch2.16
• Red Hat Enterprise Linux Fast Datapath 8 update for openvswitch2.15
• Red Hat Enterprise Linux Fast Datapath 8 update for openvswitch2.17
• Red Hat Enterprise Linux Fast Datapath 9 update for openvswitch2.17
• Red Hat Enterprise Linux Fast Datapath 8 update for openvswitch2.13
• Multiple vulnerabilities in OpenShift Container Platform 4.11
• SUSE update for dpdk
• SUSE update for dpdk
• SUSE update for dpdk
• Red Hat Enterprise Linux 9 update for dpdk
• Multiple vulnerabilities in Oracle Communications Session Border Controller
• Multiple vulnerabilities in Oracle Linux
• openEuler update for dpdk