Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.
A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first segment or in the destination buffer, and
High(8.6)
Unknown
Matching against OpenFactory catalog package versions is in progress. Observed:
A flaw was found in the DPDK vhost library. When handling a virtio indirect descriptor table, the host reads the table length more than once from guest memory and can allocate a host copy before valid
Medium(6.4)
Unknown
Matching against OpenFactory catalog package versions is in progress. Observed:
A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair can be overflowed when more virtqueues are configured, leading to a host crash or memory corruption.
High(8.8)
Unknown
Matching against OpenFactory catalog package versions is in progress. Observed:
A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, and missing length checks on the RSA path, can overflow a host buffer in the vhost-crypto backend.
High(8.8)
Unknown
Matching against OpenFactory catalog package versions is in progress. Observed:
A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-fetches a guest descriptor next index, allowing a malicious guest to cause an out-of-bounds access in the host
High(8.8)
Unknown
Matching against OpenFactory catalog package versions is in progress. Observed:
A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when mapping a guest descriptor fails, causing the host vhost-crypto process to hang
High(7.3)
Unknown
Matching against OpenFactory catalog package versions is in progress. Observed:
A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor index that is used without bounds checking, causing an out-of-bounds write in the host vhost-crypto backend
High(8.8)
Unknown
Matching against OpenFactory catalog package versions is in progress. Observed:
A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session pointer, and the data path does not check the session type before attaching it, leading to use-after-f
High(8.8)
Unknown
Matching against OpenFactory catalog package versions is in progress. Observed:
A flaw was found in DPDK lib/vhost. A guest with runt RX descriptors can underflow the copy length in vhost enqueue, causing a denial of service in a shared vhost backend such as OVS-DPDK.
High(8.8)
Unknown
Matching against OpenFactory catalog package versions is in progress. Observed:
A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table size, causing an out-of-bounds write in the host vhost process.
High(8.8)
Unknown
Matching against OpenFactory catalog package versions is in progress. Observed:
A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the VDUSE control-queue handler.
High(7.8)
Unknown
Matching against OpenFactory catalog package versions is in progress. Observed:
A flaw was found in DPDK lib/vhost. Memory size is not adequately validated before mmap during vhost memory-region setup, which can lead to a host crash or memory corruption.
Medium(6.5)
Unknown
Matching against OpenFactory catalog package versions is in progress. Observed:
A flaw was found in DPDK lib/vhost. Missing length validation before reading command_data in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash.
Low(3.3)
Unknown
Matching against OpenFactory catalog package versions is in progress. Observed:
