The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2102 advisory.

    Red Hat OpenStack Platform provides the facilities for building, deploying     and monitoring a private or public infrastructure-as-a-service (IaaS) cloud     running on commonly available physical hardware.

    Security Fix(es):

    * dpdk: Information exposure in unchecked guest physical to host virtual address translations     (CVE-2018-1059)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

    The CVE-2018-1059 issue was discovered by Maxime Coquelin (Red Hat).

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - dpdk: Information exposure in unchecked guest physical to host virtual address translations     (CVE-2018-1059)

  - A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate     `msg->payload.inflight.num_queues`, possibly causing out-of-bounds memory read/write. Any software using     DPDK vhost library may crash as a result of this vulnerability. (CVE-2021-3839)

  - NVIDIA's distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the     network stack, where error recovery is not handled properly, which can allow a remote attacker to cause     denial of service and some impact to data integrity and confidentiality. (CVE-2022-28199)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2524 advisory.

    Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote     per-flow control of traffic.

    Security Fix(es):

    * dpdk: Information exposure in unchecked guest physical to host virtual address translations     (CVE-2018-1059)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

    This issue was discovered by Maxime Coquelin (Red Hat).

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Update to latest 17.11 LTS (fixes bz 1571352)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for dpdk to version 16.11.8 provides the following security fix :

  - CVE-2018-1059: restrict untrusted guest to misuse virtio     to corrupt host application (ovs-dpdk) memory which     could have lead all VM to lose connectivity     (bsc#1089638)

and following non-security fixes :

  - Enable the broadcom chipset family Broadcom NetXtreme II     BCM57810 (bsc#1073363)

  - Fix a latency problem by using cond_resched rather than     schedule_timeout_interruptible (bsc#1069601)

  - Fix a syntax error affecting csh environment     configuration (bsc#1102310)

  - Fixes in net/bnxt :

  - Fix HW Tx checksum offload check

  - Fix incorrect IO address handling in Tx

  - Fix Rx ring count limitation

  - Check access denied for HWRM commands

  - Fix RETA size

  - Fix close operation

  - Fixes in eal/linux :

  - Fix an invalid syntax in interrupts

  - Fix return codes on thread naming failure

  - Fixes in kni :

  - Fix crash with null name

  - Fix build with gcc 8.1

  - Fixes in net/thunderx :

  - Fix build with gcc optimization on

  - Avoid sq door bell write on zero packet

  - net/bonding: Fix MAC address reset

  - vhost: Fix missing increment of log cache count

This update was imported from the SUSE:SLE-12-SP3:Update update project.

This update for dpdk to version 16.11.8 provides the following security fix :

CVE-2018-1059: restrict untrusted guest to misuse virtio to corrupt host application (ovs-dpdk) memory which could have lead all VM to lose connectivity (bsc#1089638)

and following non-security fixes: Enable the broadcom chipset family Broadcom NetXtreme II BCM57810 (bsc#1073363)

Fix a latency problem by using cond_resched rather than schedule_timeout_interruptible (bsc#1069601)

Fix a syntax error affecting csh environment configuration (bsc#1102310)

Fixes in net/bnxt :

  - Fix HW Tx checksum offload check

  - Fix incorrect IO address handling in Tx

  - Fix Rx ring count limitation

  - Check access denied for HWRM commands

  - Fix RETA size

  - Fix close operation

Fixes in eal/linux :

  - Fix an invalid syntax in interrupts

  - Fix return codes on thread naming failure

Fixes in kni :

  - Fix crash with null name

  - Fix build with gcc 8.1

Fixes in net/thunderx :

  - Fix build with gcc optimization on

  - Avoid sq door bell write on zero packet

net/bonding: Fix MAC address reset

vhost: Fix missing increment of log cache count

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2038 advisory.

    The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast     packet processing in the user space.

    Security Fix(es):

    * dpdk: Information exposure in unchecked guest physical to host virtual address translations     (CVE-2018-1059)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

    This issue was discovered by Maxime Coquelin (Red Hat).

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update fixes the following issues :

  - CVE-2018-1059: The DPDK vhost-user interface did not     check to verify that all the requested guest physical     range was mapped and contiguous when performing Guest     Physical Addresses to Host Virtual Addresses     translations. This may have lead to a malicious guest     exposing vhost-user backend process memory     (bsc#1089638). This update was imported from the     SUSE:SLE-12-SP3:Update update project.

This update fixes the following issues :

  - CVE-2018-1059: The DPDK vhost-user interface does not     check to verify that all the requested guest physical     range is mapped and contiguous when performing Guest     Physical Addresses to Host Virtual Addresses     translations. This may lead to a malicious guest     exposing vhost-user backend process memory. All versions     before 18.02.1 are vulnerable. (bsc#1089638).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

USN-3642-1 fixed a vulnerability in DPDK. This update provides the corresponding update for Ubuntu 17.10.

Maxime Coquelin discovered that DPDK incorrectly handled guest physical ranges. A malicious guest could use this issue to possibly access sensitive information.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3642-1 advisory.

    Maxime Coquelin discovered that DPDK incorrectly handled guest physical ranges. A malicious guest could     use this issue to possibly access sensitive information.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1267 advisory.

    Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote     per-flow control of traffic.

    Security Fix(es):

    * dpdk: Information exposure in unchecked guest physical to host virtual address translations     (CVE-2018-1059)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

    This issue was discovered by Maxime Coquelin (Red Hat).

    Bug Fix(es):

    * The openvswitch packages have been upgraded to upstream version 2.9.0, which provides a number of bug     fixes and enhancements over the previous version. (BZ#1560628)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
210308	RHEL 7 : Red Hat OpenStack Platform 10 Security, Bug Fix, and Enhancement Advisory (Moderate) (RHSA-2018:2102)	Nessus	Red Hat Local Security Checks	medium
199615	RHEL 7 : dpdk (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
196003	RHEL 7 : dpdk (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	medium
194058	RHEL 7 : openvswitch (RHSA-2018:2524)	Nessus	Red Hat Local Security Checks	medium
120319	Fedora 28 : 2:dpdk (2018-2c965abb15)	Nessus	Fedora Local Security Checks	medium
119492	openSUSE Security Update : dpdk (openSUSE-2018-1484)	Nessus	SuSE Local Security Checks	medium
119283	SUSE SLES12 Security Update : dpdk (SUSE-SU-2018:3923-1)	Nessus	SuSE Local Security Checks	medium
110716	RHEL 7 : dpdk (RHSA-2018:2038)	Nessus	Red Hat Local Security Checks	medium
110336	openSUSE Security Update : dpdk-thunderxdpdk (openSUSE-2018-558)	Nessus	SuSE Local Security Checks	medium
110310	SUSE SLES12 Security Update : dpdk-thunderxdpdk (SUSE-SU-2018:1492-1)	Nessus	SuSE Local Security Checks	medium
109892	Ubuntu 17.10 : DPDK vulnerability (USN-3642-2)	Nessus	Ubuntu Local Security Checks	medium
109680	Ubuntu 18.04 LTS : DPDK vulnerability (USN-3642-1)	Nessus	Ubuntu Local Security Checks	medium
109441	RHEL 7 : openvswitch (RHSA-2018:1267)	Nessus	Red Hat Local Security Checks	medium

Detections

Analytics

CVE-2018-1059

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium