The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:6504 advisory.

    Open vSwitch provides standard network bridging functions and support for     the OpenFlow protocol for remote per-flow control of traffic.

    Security Fix(es):

    * dpdk: error recovery in mlx5 driver not handled properly, allowing for     denial of service (CVE-2022-28199)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3341-1 advisory.

  - A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a     denial of service triggered by sending a crafted Vhost header to DPDK. (CVE-2022-2132)

  - NVIDIA's distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the     network stack, where error recovery is not handled properly, which can allow a remote attacker to cause     denial of service and some impact to data integrity and confidentiality. (CVE-2022-28199)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-8263 advisory.

    - Includes fixes for CVE-2022-2132 (#2107173) and CVE-2022-28199 (#2123616)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dpdk-21.11.2-1.el9 build changelog.

  - A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a     denial of service triggered by sending a crafted Vhost header to DPDK. (CVE-2022-2132)

  - NVIDIA's distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the     network stack, where error recovery is not handled properly, which can allow a remote attacker to cause     denial of service and some impact to data integrity and confidentiality. (CVE-2022-28199)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

遠端 Redhat Enterprise Linux 8 主機上安裝的多個套件受到 RHSA-2022: 6505 公告中提及的一個弱點影響。

  - dpdk：未正確處理 mlx5 驅動程式中的錯誤復原，進而允許發生拒絕服務 (CVE-2022-28199)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Redhat Enterprise Linux 8 主機上安裝的多個套件受到 RHSA-2022: 6504 公告中提及的一個弱點影響。

  - dpdk：未正確處理 mlx5 驅動程式中的錯誤復原，進而允許發生拒絕服務 (CVE-2022-28199)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Oracle Linux 9 主機中安裝的套件受到 ELSA-2022-8263 公告中提及的多個弱點影響。

  - NVIDIA Data Plane Development Kit (MLNX_DPDK) 發行版本的網路堆疊中存在弱點，其未正確處理錯誤復原，遠端攻擊者可以藉此造成拒絕服務，並對資料完整性和機密性造成一定影響。(CVE-2022-28199)

  - 在 DPDK 中發現寬鬆的輸入允許清單瑕疵。此問題允許遠端攻擊者透過傳送特製的 Vhost 標頭至 DPDK，造成程式拒絕服務。(CVE-2022-2132)

  - 在 DPDK 的 vhost 庫中發現一個缺陷。vhost_user_set_inflight_fd() 函式未驗證 msg->payload.inflight.num_queues，這可能造成超出邊界記憶體讀取/寫入。所有使用 DPDK vhost 庫的軟體都可能因此弱點而發生損毀。(CVE-2021-3839)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 CentOS Linux 9 主機上安裝的套件受到 dpdk-21.11.2-1.el9 版本變更記錄中提及的多個弱點影響。

  - 在 DPDK 中發現寬鬆的輸入允許清單瑕疵。此問題允許遠端攻擊者透過傳送特製的 Vhost 標頭至 DPDK，造成程式拒絕服務。(CVE-2022-2132)

  - NVIDIA Data Plane Development Kit (MLNX_DPDK) 發行版本的網路堆疊中存在弱點，其未正確處理錯誤復原，遠端攻擊者可以藉此造成拒絕服務，並對資料完整性和機密性造成一定影響。(CVE-2022-28199)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

ID	名前	製品	ファミリー	公開日	更新日	深刻度
165014	RHEL 8 : openvswitch2.17 (RHSA-2022:6504)	Nessus	Red Hat Local Security Checks	2022/9/13	2024/11/7	medium
165420	SUSE SLES15 Security Update : dpdk (SUSE-SU-2022:3341-1)	Nessus	SuSE Local Security Checks	2022/9/24	2023/7/13	high
168082	Oracle Linux 9 : dpdk (ELSA-2022-8263)	Nessus	Oracle Linux Local Security Checks	2022/11/22	2024/10/22	high
191198	CentOS 9 : dpdk-21.11.2-1.el9	Nessus	CentOS Local Security Checks	2024/2/29	2024/4/26	high
165010	RHEL 8：openvswitch2.15 (RHSA-2022: 6505)	Nessus	Red Hat Local Security Checks	2022/9/13	2024/11/7	medium
165014	RHEL 8：openvswitch2.17 (RHSA-2022: 6504)	Nessus	Red Hat Local Security Checks	2022/9/13	2024/11/7	medium
168082	Oracle Linux 9：dpdk (ELSA-2022-8263)	Nessus	Oracle Linux Local Security Checks	2022/11/22	2024/10/22	high
191198	CentOS 9：dpdk-21.11.2-1.el9	Nessus	CentOS Local Security Checks	2024/2/29	2024/4/26	high

検出

プラグインの検索

medium

high

high

high

medium

medium

high

high