CVE-2022-28199
NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.
- Score
- CVSS 3.1 8.6 High
- Status
- Modified - psirt@nvidia.com
- Published
- 2022-09-01
- Last modified
- 2024-08-03
- Weaknesses
- CWE-1284, CWE-20
Affected products
References
- http://www.openwall.com/lists/oss-security/2022/09/06/2
- https://nvidia.custhelp.com/app/answers/detail/a_id/5389
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mlx5-jbPCrqD8
