The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2524 advisory.

  - dpdk: Information exposure in unchecked guest physical to host virtual address translations     (CVE-2018-1059)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Update to latest 17.11 LTS (fixes bz 1571352)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for dpdk to version 16.11.8 provides the following security fix :

  - CVE-2018-1059: restrict untrusted guest to misuse virtio     to corrupt host application (ovs-dpdk) memory which     could have lead all VM to lose connectivity     (bsc#1089638)

and following non-security fixes :

  - Enable the broadcom chipset family Broadcom NetXtreme II     BCM57810 (bsc#1073363)

  - Fix a latency problem by using cond_resched rather than     schedule_timeout_interruptible (bsc#1069601)

  - Fix a syntax error affecting csh environment     configuration (bsc#1102310)

  - Fixes in net/bnxt :

  - Fix HW Tx checksum offload check

  - Fix incorrect IO address handling in Tx

  - Fix Rx ring count limitation

  - Check access denied for HWRM commands

  - Fix RETA size

  - Fix close operation

  - Fixes in eal/linux :

  - Fix an invalid syntax in interrupts

  - Fix return codes on thread naming failure

  - Fixes in kni :

  - Fix crash with null name

  - Fix build with gcc 8.1

  - Fixes in net/thunderx :

  - Fix build with gcc optimization on

  - Avoid sq door bell write on zero packet

  - net/bonding: Fix MAC address reset

  - vhost: Fix missing increment of log cache count

This update was imported from the SUSE:SLE-12-SP3:Update update project.

This update for dpdk to version 16.11.8 provides the following security fix :

CVE-2018-1059: restrict untrusted guest to misuse virtio to corrupt host application (ovs-dpdk) memory which could have lead all VM to lose connectivity (bsc#1089638)

and following non-security fixes: Enable the broadcom chipset family Broadcom NetXtreme II BCM57810 (bsc#1073363)

Fix a latency problem by using cond_resched rather than schedule_timeout_interruptible (bsc#1069601)

Fix a syntax error affecting csh environment configuration (bsc#1102310)

Fixes in net/bnxt :

  - Fix HW Tx checksum offload check

  - Fix incorrect IO address handling in Tx

  - Fix Rx ring count limitation

  - Check access denied for HWRM commands

  - Fix RETA size

  - Fix close operation

Fixes in eal/linux :

  - Fix an invalid syntax in interrupts

  - Fix return codes on thread naming failure

Fixes in kni :

  - Fix crash with null name

  - Fix build with gcc 8.1

Fixes in net/thunderx :

  - Fix build with gcc optimization on

  - Avoid sq door bell write on zero packet

net/bonding: Fix MAC address reset

vhost: Fix missing increment of log cache count

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2038 advisory.

  - dpdk: Information exposure in unchecked guest physical to host virtual address translations     (CVE-2018-1059)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update fixes the following issues :

  - CVE-2018-1059: The DPDK vhost-user interface did not     check to verify that all the requested guest physical     range was mapped and contiguous when performing Guest     Physical Addresses to Host Virtual Addresses     translations. This may have lead to a malicious guest     exposing vhost-user backend process memory     (bsc#1089638). This update was imported from the     SUSE:SLE-12-SP3:Update update project.

This update fixes the following issues :

  - CVE-2018-1059: The DPDK vhost-user interface does not     check to verify that all the requested guest physical     range is mapped and contiguous when performing Guest     Physical Addresses to Host Virtual Addresses     translations. This may lead to a malicious guest     exposing vhost-user backend process memory. All versions     before 18.02.1 are vulnerable. (bsc#1089638).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

USN-3642-1 fixed a vulnerability in DPDK. This update provides the corresponding update for Ubuntu 17.10.

Maxime Coquelin discovered that DPDK incorrectly handled guest physical ranges. A malicious guest could use this issue to possibly access sensitive information.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Maxime Coquelin discovered that DPDK incorrectly handled guest physical ranges. A malicious guest could use this issue to possibly access sensitive information.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1267 advisory.

  - dpdk: Information exposure in unchecked guest physical to host virtual address translations     (CVE-2018-1059)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
194058	RHEL 7 : openvswitch (RHSA-2018:2524)	Nessus	Red Hat Local Security Checks	medium
120319	Fedora 28 : 2:dpdk (2018-2c965abb15)	Nessus	Fedora Local Security Checks	medium
119492	openSUSE Security Update : dpdk (openSUSE-2018-1484)	Nessus	SuSE Local Security Checks	medium
119283	SUSE SLES12 Security Update : dpdk (SUSE-SU-2018:3923-1)	Nessus	SuSE Local Security Checks	medium
110716	RHEL 7 : dpdk (RHSA-2018:2038)	Nessus	Red Hat Local Security Checks	medium
110336	openSUSE Security Update : dpdk-thunderxdpdk (openSUSE-2018-558)	Nessus	SuSE Local Security Checks	medium
110310	SUSE SLES12 Security Update : dpdk-thunderxdpdk (SUSE-SU-2018:1492-1)	Nessus	SuSE Local Security Checks	medium
109892	Ubuntu 17.10 : DPDK vulnerability (USN-3642-2)	Nessus	Ubuntu Local Security Checks	medium
109680	Ubuntu 18.04 LTS : DPDK vulnerability (USN-3642-1)	Nessus	Ubuntu Local Security Checks	medium
109441	RHEL 7 : openvswitch (RHSA-2018:1267)	Nessus	Red Hat Local Security Checks	medium

Detections

Analytics

CVE-2018-1059

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium