This update for dpdk to version 16.11.8 provides the following security fix :

CVE-2018-1059: restrict untrusted guest to misuse virtio to corrupt host application (ovs-dpdk) memory which could have lead all VM to lose connectivity (bsc#1089638)

and following non-security fixes: Enable the broadcom chipset family Broadcom NetXtreme II BCM57810 (bsc#1073363)

Fix a latency problem by using cond_resched rather than schedule_timeout_interruptible (bsc#1069601)

Fix a syntax error affecting csh environment configuration (bsc#1102310)

Fixes in net/bnxt :

  - Fix HW Tx checksum offload check

  - Fix incorrect IO address handling in Tx

  - Fix Rx ring count limitation

  - Check access denied for HWRM commands

  - Fix RETA size

  - Fix close operation

Fixes in eal/linux :

  - Fix an invalid syntax in interrupts

  - Fix return codes on thread naming failure

Fixes in kni :

  - Fix crash with null name

  - Fix build with gcc 8.1

Fixes in net/thunderx :

  - Fix build with gcc optimization on

  - Avoid sq door bell write on zero packet

net/bonding: Fix MAC address reset

vhost: Fix missing increment of log cache count

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Maxime Coquelin discovered that DPDK incorrectly handled guest physical ranges. A malicious guest could use this issue to possibly access sensitive information.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1267 advisory.

  - dpdk: Information exposure in unchecked guest physical to host virtual address translations     (CVE-2018-1059)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

USN-3642-1 fixed a vulnerability in DPDK. This update provides the corresponding update for Ubuntu 17.10.

Maxime Coquelin discovered that DPDK incorrectly handled guest physical ranges. A malicious guest could use this issue to possibly access sensitive information.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - dpdk: Information exposure in unchecked guest physical to host virtual address translations     (CVE-2018-1059)

  - A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate     `msg->payload.inflight.num_queues`, possibly causing out-of-bounds memory read/write. Any software using     DPDK vhost library may crash as a result of this vulnerability. (CVE-2021-3839)

  - A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected number of     fds as ancillary data to VHOST_USER_GET_INFLIGHT_FD / VHOST_USER_SET_INFLIGHT_FD messages that are not     closed by the vhost-user slave. By sending such messages continuously, the vhost-user master exhausts     available fd in the vhost-user slave process, leading to a denial of service. (CVE-2022-0669)

  - NVIDIA's distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the     network stack, where error recovery is not handled properly, which can allow a remote attacker to cause     denial of service and some impact to data integrity and confidentiality. (CVE-2022-28199)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This update fixes the following issues :

  - CVE-2018-1059: The DPDK vhost-user interface does not     check to verify that all the requested guest physical     range is mapped and contiguous when performing Guest     Physical Addresses to Host Virtual Addresses     translations. This may lead to a malicious guest     exposing vhost-user backend process memory. All versions     before 18.02.1 are vulnerable. (bsc#1089638).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update fixes the following issues :

  - CVE-2018-1059: The DPDK vhost-user interface did not     check to verify that all the requested guest physical     range was mapped and contiguous when performing Guest     Physical Addresses to Host Virtual Addresses     translations. This may have lead to a malicious guest     exposing vhost-user backend process memory     (bsc#1089638). This update was imported from the     SUSE:SLE-12-SP3:Update update project.

This update for dpdk to version 16.11.8 provides the following security fix :

  - CVE-2018-1059: restrict untrusted guest to misuse virtio     to corrupt host application (ovs-dpdk) memory which     could have lead all VM to lose connectivity     (bsc#1089638)

and following non-security fixes :

  - Enable the broadcom chipset family Broadcom NetXtreme II     BCM57810 (bsc#1073363)

  - Fix a latency problem by using cond_resched rather than     schedule_timeout_interruptible (bsc#1069601)

  - Fix a syntax error affecting csh environment     configuration (bsc#1102310)

  - Fixes in net/bnxt :

  - Fix HW Tx checksum offload check

  - Fix incorrect IO address handling in Tx

  - Fix Rx ring count limitation

  - Check access denied for HWRM commands

  - Fix RETA size

  - Fix close operation

  - Fixes in eal/linux :

  - Fix an invalid syntax in interrupts

  - Fix return codes on thread naming failure

  - Fixes in kni :

  - Fix crash with null name

  - Fix build with gcc 8.1

  - Fixes in net/thunderx :

  - Fix build with gcc optimization on

  - Avoid sq door bell write on zero packet

  - net/bonding: Fix MAC address reset

  - vhost: Fix missing increment of log cache count

This update was imported from the SUSE:SLE-12-SP3:Update update project.

Update to latest 17.11 LTS (fixes bz 1571352)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2038 advisory.

  - dpdk: Information exposure in unchecked guest physical to host virtual address translations     (CVE-2018-1059)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2524 advisory.

  - dpdk: Information exposure in unchecked guest physical to host virtual address translations     (CVE-2018-1059)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
119283	SUSE SLES12 Security Update : dpdk (SUSE-SU-2018:3923-1)	Nessus	SuSE Local Security Checks	11/29/2018	1/13/2021	medium
109680	Ubuntu 18.04 LTS : DPDK vulnerability (USN-3642-1)	Nessus	Ubuntu Local Security Checks	5/10/2018	10/20/2023	medium
109441	RHEL 7 : openvswitch (RHSA-2018:1267)	Nessus	Red Hat Local Security Checks	5/1/2018	4/27/2024	medium
109892	Ubuntu 17.10 : DPDK vulnerability (USN-3642-2)	Nessus	Ubuntu Local Security Checks	5/17/2018	5/11/2023	medium
196003	RHEL 7 : dpdk (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	medium
110310	SUSE SLES12 Security Update : dpdk-thunderxdpdk (SUSE-SU-2018:1492-1)	Nessus	SuSE Local Security Checks	6/4/2018	1/13/2021	medium
110336	openSUSE Security Update : dpdk-thunderxdpdk (openSUSE-2018-558)	Nessus	SuSE Local Security Checks	6/6/2018	1/19/2021	medium
119492	openSUSE Security Update : dpdk (openSUSE-2018-1484)	Nessus	SuSE Local Security Checks	12/7/2018	1/19/2021	medium
120319	Fedora 28 : 2:dpdk (2018-2c965abb15)	Nessus	Fedora Local Security Checks	1/3/2019	1/6/2021	medium
110716	RHEL 7 : dpdk (RHSA-2018:2038)	Nessus	Red Hat Local Security Checks	6/27/2018	4/24/2024	medium
194058	RHEL 7 : openvswitch (RHSA-2018:2524)	Nessus	Red Hat Local Security Checks	4/27/2024	4/27/2024	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium