Spdk Storage Performance Development Kit — known CVE vulnerabilities

Every CVE whose affected-product data names Spdk Storage Performance Development Kit, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2021-28361 — CVSS 7.5 (high): An issue was discovered in Storage Performance Development Kit (SPDK) before 20.01.01. If a PDU is sent to the iSCSI target with a zero…
• CVE-2019-14940 — CVSS 6.5 (medium): In Storage Performance Development Kit (SPDK) before 19.07, a user of a vhost can cause a crash if the target is sent invalid input.
• CVE-2019-9547 — CVSS 5.3 (medium): In Storage Performance Development Kit (SPDK) before 19.01, a malicious vhost client (i.e., virtual machine) could carefully construct a…