[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fS7VzCw2LQpKY2q2qlp8vgYIA4eBGJQK-g5Zxe1PztPI":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":25,"kevVulnerabilities":85,"topProductsByCves":86,"seoMetadata":89,"meta":98},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":24},8460,"dpdk",2,16,0,68,"2022-08-31","d",[16,20],{"id":17,"product_name":18,"version_count":12,"cve_count":19,"kev_count":11,"last_cve_update":13},39146,"data_plane_development_kit",15,{"id":21,"product_name":8,"version_count":11,"cve_count":22,"kev_count":11,"last_cve_update":23},39147,1,"2018-01-23","Dpdk is a technology vendor with 2 tracked products and 16 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[26,35,40,46,51,56,63,68,74,79],{"cveId":27,"description":28,"publishedDate":29,"cvssScore":30,"cvssVersion":31,"severity":32,"isKev":33,"epssScore":34},"CVE-2019-14818","A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhost_user socket, can send specially crafted VRING_SET_NUM messages, resulting in a memory leak including file descriptors. This flaw could lead to a denial of service condition.","2019-11-14",7.5,"v3.1","High",false,0.02815,{"cveId":36,"description":37,"publishedDate":13,"cvssScore":38,"cvssVersion":31,"severity":32,"isKev":33,"epssScore":39},"CVE-2022-2132","A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending a crafted Vhost header to DPDK.",8.6,0.0224,{"cveId":41,"description":42,"publishedDate":43,"cvssScore":44,"cvssVersion":31,"severity":32,"isKev":33,"epssScore":45},"CVE-2020-10725","A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vhost-user backend application running on the host, which could result in a loss of connectivity for the other guests running on that host. This is caused by a missing validity check of the descriptor address in the function `virtio_dev_rx_batch_packed()`.","2020-05-20",7.7,0.02213,{"cveId":47,"description":48,"publishedDate":23,"cvssScore":38,"cvssVersion":49,"severity":32,"isKev":33,"epssScore":50},"CVE-2015-1142857","On multiple SR-IOV cars it is possible for VF's assigned to guests to send ethernet flow control pause frames via the PF. This includes Linux kernel ixgbe driver before commit f079fa005aae08ee0e1bc32699874ff4f02e11c1, the Linux Kernel i40e\u002Fi40evf driver before e7358f54a3954df16d4f87e3cad35063f1c17de5 and the DPDK before commit 3f12b9f23b6499ff66ec8b0de941fb469297e5d0, additionally Multiple vendor NIC firmware is affected.","v3.0",0.02109,{"cveId":52,"description":53,"publishedDate":54,"cvssScore":30,"cvssVersion":31,"severity":32,"isKev":33,"epssScore":55},"CVE-2021-3839","A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inflight.num_queues`, possibly causing out-of-bounds memory read\u002Fwrite. Any software using DPDK vhost library may crash as a result of this vulnerability.","2022-08-23",0.01592,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":60,"cvssVersion":49,"severity":61,"isKev":33,"epssScore":62},"CVE-2018-1059","The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable.","2018-04-24",6.1,"Medium",0.00848,{"cveId":64,"description":65,"publishedDate":43,"cvssScore":66,"cvssVersion":31,"severity":61,"isKev":33,"epssScore":67},"CVE-2020-10726","A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct access to the vhost-user socket can keep sending VHOST_USER_GET_INFLIGHT_FD messages, causing a resource leak (file descriptors and virtual memory), which may result in a denial of service.",4.4,0.00473,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":72,"cvssVersion":31,"severity":32,"isKev":33,"epssScore":73},"CVE-2020-14374","A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A flawed bounds checking in the copy_data function leads to a buffer overflow allowing an attacker in a virtual machine to write arbitrary data to any address in the vhost_crypto application. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","2020-09-30",8.8,0.00429,{"cveId":75,"description":76,"publishedDate":71,"cvssScore":77,"cvssVersion":31,"severity":32,"isKev":33,"epssScore":78},"CVE-2020-14377","A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A complete lack of validation of attacker-controlled parameters can lead to a buffer over read. The results of the over read are then written back to the guest virtual machine memory. This vulnerability can be used by an attacker in a virtual machine to read significant amounts of host memory. The highest threat from this vulnerability is to data confidentiality and system availability.",7.1,0.00411,{"cveId":80,"description":81,"publishedDate":71,"cvssScore":82,"cvssVersion":31,"severity":83,"isKev":33,"epssScore":84},"CVE-2020-14378","An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc` function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause `move_desc` to get stuck in a 4,294,967,295-count iteration loop. Depending on how `vhost_crypto` is being used this could prevent other VMs or network tasks from being serviced by the busy DPDK lcore for an extended period.",3.3,"Low",0.00397,[],[87,88],{"id":17,"product_name":18,"version_count":12,"cve_count":19,"kev_count":11,"last_cve_update":13},{"id":21,"product_name":8,"version_count":11,"cve_count":22,"kev_count":11,"last_cve_update":23},{"title":90,"metaDescription":91,"keywords":92,"structuredData":93},"Dpdk - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Dpdk covering 2 products with 16 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Dpdk vulnerabilities, Dpdk security, Dpdk CVE, Dpdk threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":94,"@type":95,"name":96,"description":91,"url":97},"https:\u002F\u002Fschema.org","Organization","Dpdk","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fdpdk",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":99,"apiVersion":100},"2026-10-17T13:44:15.794Z","3.0"]