CVE-2022-2132: debian debian_linux Incomplete Filtering of Special Elements

CVSS: 8.6v3.1HighModified

AliasesSUSE-SU-2022:3356-1SUSE-SU-2022:3381-1SUSE-SU-2022:3430-1+23 more

Published 31-08-2022Last modified 03-08-2024

Vulnerability summary

CVE-2022-2132 is a high (CVSS 8.6) Incomplete Filtering of Special Elements vulnerability in debian debian_linux. EPSS estimates a 2.24% chance of exploitation in the next 30 days, higher than 82.5% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk

45/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.6/10

010

High · v3.1 (NVD)

EPSS score

2.24%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits2reference

Advisory lineage

Upstream 0 · Downstream 6 · Related 3

DSA-5222-1 RHSA-2022:6551 RHSA-2022:8263 SUSE-SU-2022:3341-1 SUSE-SU-2022:3390-1 SUSE-SU-2022:3429-1

Timeline

31-08-2022
PublishedVulnerability first disclosed.
03-08-2024
Last modifiedVulnerability information updated.

Description

A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending a crafted Vhost header to DPDK.

CVSS metrics

4 scores · 4 sources · 1 version

v3.18.6

EPSS trend

Probability

2.24%

Chance of exploitation in the next 30 days

Percentile

83%

Versus all other CVEs

30-day change

0.00 pp

From 2.24% on 18-09-2026

18-09-202618-10-2026

EPSS score

2.24%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (bugzilla.redhat.com)
Maturity: unknown
referenceUnverified
Exploit Reference (bugs.dpdk.org)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-791Incomplete Filtering of Special ElementsThe product receives data from an upstream component, but does not completely filter special elements before sending it to a downstream component.

Affected systems

Redhat53 products

enterprise_linuxEOL7.0 | 8.0 | 9.0
enterprise_linux_fast_datapath7.0 | 8.0 | 9.0
openshift_container_platform4.0
openstack_platform13.0
virtualization4.0

dpdk< 0:19.11-6.el8_2 | < 0:18.11.8-2.el7_9 | < 0:18.11.2-5.el8_1 | < 0:20.11-4.el8_4 | < 0:21.11-2.el8_6 | < 0:21.11-2.el8_7 | < 2:21.11-2.el9_0
dpdk-debuginfo< 0:19.11-6.el8_2 | < 0:18.11.8-2.el7_9 | < 0:18.11.2-5.el8_1 | < 0:20.11-4.el8_4 | < 0:21.11-2.el8_6 | < 0:21.11-2.el8_7 | < 2:21.11-2.el9_0
dpdk-debugsource< 0:19.11-6.el8_2 | < 0:18.11.2-5.el8_1 | < 0:20.11-4.el8_4 | < 0:21.11-2.el8_6 | < 0:21.11-2.el8_7 | < 2:21.11-2.el9_0
dpdk-devel< 0:19.11-6.el8_2 | < 0:18.11.8-2.el7_9 | < 0:18.11.2-5.el8_1 | < 0:20.11-4.el8_4 | < 0:21.11-2.el8_6 | < 0:21.11-2.el8_7 | < 2:21.11-2.el9_0
dpdk-devel-debuginfo< 0:19.11-6.el8_2 | < 0:18.11.2-5.el8_1
dpdk-doc< 0:19.11-6.el8_2 | < 0:18.11.8-2.el7_9 | < 0:18.11.2-5.el8_1 | < 0:20.11-4.el8_4 | < 0:21.11-2.el8_6 | < 0:21.11-2.el8_7 | < 2:21.11-2.el9_0
dpdk-tools< 0:19.11-6.el8_2 | < 0:18.11.8-2.el7_9 | < 0:18.11.2-5.el8_1 | < 0:20.11-4.el8_4 | < 0:21.11-2.el8_6 | < 0:21.11-2.el8_7 | < 2:21.11-2.el9_0
network-scripts-openvswitch2.13< 0:2.13.0-193.2.el8fdp
network-scripts-openvswitch2.15< 0:2.15.0-113.2.el8fdp
network-scripts-openvswitch2.16< 0:2.16.0-89.2.el8fdp
network-scripts-openvswitch2.17< 0:2.17.0-37.3.el8fdp
openvswitch2.11< 0:2.11.3-96.2.el7fdp
openvswitch2.11-debuginfo< 0:2.11.3-96.2.el7fdp
openvswitch2.11-devel< 0:2.11.3-96.2.el7fdp
openvswitch2.11-test< 0:2.11.3-96.2.el7fdp
openvswitch2.13< 0:2.13.0-193.2.el8fdp
openvswitch2.13-debuginfo< 0:2.13.0-193.2.el8fdp
openvswitch2.13-debugsource< 0:2.13.0-193.2.el8fdp
openvswitch2.13-devel< 0:2.13.0-193.2.el8fdp
openvswitch2.13-ipsec< 0:2.13.0-193.2.el8fdp
openvswitch2.13-test< 0:2.13.0-193.2.el8fdp
openvswitch2.15< 0:2.15.0-113.2.el8fdp
openvswitch2.15-debuginfo< 0:2.15.0-113.2.el8fdp
openvswitch2.15-debugsource< 0:2.15.0-113.2.el8fdp
openvswitch2.15-devel< 0:2.15.0-113.2.el8fdp
openvswitch2.15-ipsec< 0:2.15.0-113.2.el8fdp
openvswitch2.15-test< 0:2.15.0-113.2.el8fdp
openvswitch2.16< 0:2.16.0-89.2.el8fdp
openvswitch2.16-debuginfo< 0:2.16.0-89.2.el8fdp
openvswitch2.16-debugsource< 0:2.16.0-89.2.el8fdp
openvswitch2.16-devel< 0:2.16.0-89.2.el8fdp
openvswitch2.16-ipsec< 0:2.16.0-89.2.el8fdp
openvswitch2.16-test< 0:2.16.0-89.2.el8fdp
openvswitch2.17< 0:2.17.0-37.3.el8fdp | < 0:2.17.0-32.3.el9fdp
openvswitch2.17-debuginfo< 0:2.17.0-37.3.el8fdp | < 0:2.17.0-32.3.el9fdp
openvswitch2.17-debugsource< 0:2.17.0-37.3.el8fdp | < 0:2.17.0-32.3.el9fdp
openvswitch2.17-devel< 0:2.17.0-37.3.el8fdp | < 0:2.17.0-32.3.el9fdp
openvswitch2.17-ipsec< 0:2.17.0-37.3.el8fdp | < 0:2.17.0-32.3.el9fdp
openvswitch2.17-test< 0:2.17.0-37.3.el8fdp | < 0:2.17.0-32.3.el9fdp
python-openvswitch2.11< 0:2.11.3-96.2.el7fdp
python3-openvswitch2.13< 0:2.13.0-193.2.el8fdp
python3-openvswitch2.13-debuginfo< 0:2.13.0-193.2.el8fdp
python3-openvswitch2.15< 0:2.15.0-113.2.el8fdp
python3-openvswitch2.15-debuginfo< 0:2.15.0-113.2.el8fdp
python3-openvswitch2.16< 0:2.16.0-89.2.el8fdp
python3-openvswitch2.16-debuginfo< 0:2.16.0-89.2.el8fdp
python3-openvswitch2.17< 0:2.17.0-37.3.el8fdp | < 0:2.17.0-32.3.el9fdp
python3-openvswitch2.17-debuginfo< 0:2.17.0-37.3.el8fdp | < 0:2.17.0-32.3.el9fdp

Show all 53

Suse42 products

dpdk-thunderx&distro=SUSE Enterprise Storage 7.1< 19.11.4-150300.21.1
dpdk-thunderx&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS< 19.11.4-150200.3.25.1
dpdk-thunderx&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS< 19.11.4-150300.21.1
dpdk-thunderx&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 19.11.10-150400.4.12.1
dpdk-thunderx&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 19.11.10-150400.4.12.1

dpdk-thunderx&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS< 18.11.9-150000.3.32.2
dpdk-thunderx&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS< 18.11.9-150000.3.32.2
dpdk-thunderx&distro=SUSE Linux Enterprise Module for Legacy 15 SP5< 19.11.10-150500.5.3.1
dpdk-thunderx&distro=SUSE Linux Enterprise Server 12 SP5< 18.11.9-3.24.1 | < 18.11.9-3.29.1
dpdk-thunderx&distro=SUSE Linux Enterprise Server 15 SP2-LTSS< 19.11.4-150200.3.25.1
dpdk-thunderx&distro=SUSE Linux Enterprise Server 15 SP3-LTSS< 19.11.4-150300.21.1
dpdk-thunderx&distro=SUSE Linux Enterprise Server 15 SP4-LTSS< 19.11.10-150400.4.12.1
dpdk-thunderx&distro=SUSE Linux Enterprise Server 15-LTSS< 18.11.9-150000.3.32.2
dpdk-thunderx&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5< 18.11.9-3.24.1 | < 18.11.9-3.29.1
dpdk-thunderx&distro=SUSE Linux Enterprise Software Development Kit 12 SP5< 18.11.9-3.24.1 | < 18.11.9-3.29.1
dpdk&distro=SUSE Enterprise Storage 6< 18.11.9-150100.4.19.1
dpdk&distro=SUSE Enterprise Storage 7.1< 19.11.4-150300.21.1
dpdk&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS< 18.11.9-150100.4.19.1
dpdk&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS< 18.11.9-150100.4.19.1
dpdk&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS< 19.11.4-150200.3.25.1
dpdk&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS< 19.11.4-150300.21.1
dpdk&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 19.11.10-150400.4.12.1
dpdk&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 19.11.10-150400.4.12.1
dpdk&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS< 18.11.9-150000.3.32.2
dpdk&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS< 18.11.9-150000.3.32.2
dpdk&distro=SUSE Linux Enterprise Module for Legacy 15 SP5< 19.11.10-150500.5.3.1
dpdk&distro=SUSE Linux Enterprise Server 12 SP5< 18.11.9-3.24.1 | < 18.11.9-3.29.1
dpdk&distro=SUSE Linux Enterprise Server 15 SP1-BCL< 18.11.9-150100.4.19.1
dpdk&distro=SUSE Linux Enterprise Server 15 SP1-LTSS< 18.11.9-150100.4.19.1
dpdk&distro=SUSE Linux Enterprise Server 15 SP2-LTSS< 19.11.4-150200.3.25.1
dpdk&distro=SUSE Linux Enterprise Server 15 SP3-LTSS< 19.11.4-150300.21.1
dpdk&distro=SUSE Linux Enterprise Server 15 SP4-LTSS< 19.11.10-150400.4.12.1
dpdk&distro=SUSE Linux Enterprise Server 15-LTSS< 18.11.9-150000.3.32.2
dpdk&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5< 18.11.9-3.24.1 | < 18.11.9-3.29.1
dpdk&distro=SUSE Linux Enterprise Server for SAP Applications 15< 18.11.9-150000.3.32.2
dpdk&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1< 18.11.9-150100.4.19.1
dpdk&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2< 19.11.4-150200.3.25.1
dpdk&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3< 19.11.4-150300.21.1
dpdk&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4< 19.11.10-150400.4.12.1
dpdk&distro=SUSE Linux Enterprise Software Development Kit 12 SP5< 18.11.9-3.24.1 | < 18.11.9-3.29.1
dpdk&distro=SUSE Manager Proxy 4.3< 19.11.10-150400.4.12.1
dpdk&distro=SUSE Manager Server 4.3< 19.11.10-150400.4.12.1

Show all 42

Opensuse4 products

dpdk-thunderx&distro=openSUSE Leap 15.5< 19.11.10-150500.5.3.1
dpdk&distro=openSUSE Leap 15.3< 18.11.9-150100.4.19.1
dpdk&distro=openSUSE Leap 15.4< 18.11.9-150100.4.19.1
dpdk&distro=openSUSE Leap 15.5< 19.11.10-150500.5.3.1

Debian2 products

dpdk< 18.11.11-1~deb10u2 | < 22.11.1-2
debian_linuxEOL10.0

Dpdk1 product

data_plane_development_kit< 19.11 | ≥ 20.0, < 20.11 | ≥ 21.0, < 21.11

Fedoraproject1 product

fedoraEOL36

Ubuntu1 product

dpdkAll versions (No fix recorded) | < 17.11.10-0ubuntu0.2 | < 19.11.13-0ubuntu0.20.04.1 | < 21.11.2-0ubuntu0.22.04.1

7 vendors · 104 products

References

50 links

bugzilla.redhat.com/show_bug.cgi?id=2099475X Refsource MISCREPORTExploitIssue TrackingThird Party Advisory
bugs.dpdk.org/show_bug.cgi?id=1031X Refsource MISCARTICLEExploitIssue TrackingPatchVendor Advisory
lists.debian.org/debian-lts-announce/2022/09/msg00000.htmlMailing ListX Refsource MLISTThird Party Advisory
www.suse.com/support/update/announcement/2022/suse-su-20223356-1/Advisory
bugzilla.suse.com/1202903REPORT
www.suse.com/security/cve/CVE-2022-2132WEB
www.suse.com/support/update/announcement/2022/suse-su-20223381-1/Advisory
www.suse.com/support/update/announcement/2022/suse-su-20223430-1/Advisory
www.suse.com/support/update/announcement/2024/suse-su-20240529-1/Advisory
bugzilla.suse.com/1219187REPORT

Show all 50 references

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities