The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5222 advisory.

  - A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a     denial of service triggered by sending a crafted Vhost header to DPDK. (CVE-2022-2132)

  - NVIDIA's distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the     network stack, where error recovery is not handled properly, which can allow a remote attacker to cause     denial of service and some impact to data integrity and confidentiality. (CVE-2022-28199)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian DSA-5222-1 : dpdk - security update

high Nessus Plugin ID 164517

Version 1.6

Version 1.5

Version 1.4

Version 1.6 Oct 13, 2023, 5:16 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") CVSSv3 score source (set to "CVE-2022-2132") Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202310131716
Version 1.5 Mar 21, 2023, 7:30 PM Plugin metadata Plugin Feed: 202303211930
Version 1.4 Dec 6, 2022, 4:25 PM CVSS metrics ("CVSSv2 score" changed from "6.4" to "7.8") CVSS metrics ("CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:P" to "CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C") CVSSv2 score source (changed from "CVE-2022-28199" to "CVE-2022-2132") CVSSv2 severity (based on CVE-2022-2132, severity increased from "Medium" to "High") Plugin Feed: 202212061625