PT-2018-9981 · Intel+3 · Dpdk+3

Maxime Coquelin

·

Publicado

2018-04-24

·

Atualizado

2024-06-15

·

CVE-2018-1059

CVSS v3.1

6.1

Média

VetorAV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions: DPDK versions prior to 18.02.1
Description: The issue arises from the DPDK vhost-user interface not verifying that the requested guest physical range is mapped and contiguous during Guest Physical Addresses to Host Virtual Addresses translations. This could allow a malicious guest to expose vhost-user backend process memory.
Recommendations: For versions prior to 18.02.1, update to version 18.02.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the vhost-user interface to minimize the risk of exploitation.

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

ALT-PU-2018-2158
CVE-2018-1059
OPENSUSE-SU-2018_1560-1
OPENSUSE-SU-2018_4003-1
OPENSUSE-SU-2024:10727-1
RHSA-2018:1267
RHSA-2018:2038
RHSA-2018:2102
RHSA-2018:2524
SUSE-SU-2018:1492-1
SUSE-SU-2018:3923-1
SUSE-SU-2018_1492-1
SUSE-SU-2018_3923-1
USN-3642-1
USN-3642-2

Produtos afetados

Alt Linux
Dpdk
Suse
Ubuntu