A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2683 advisory.

  - A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in     vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory     corruption. (CVE-2020-10722)

  - A memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an integer     truncation on the index of a payload. Under certain circumstances, the index (a UInt) is copied and     truncated into a uint16, which can lead to out of bound indexing and possible memory corruption.
    (CVE-2020-10723)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair() (CVE-2020-10723)

  - openvswitch: Integer Underflow in Organization Specific TLV (CVE-2022-4338)

  - The TSS (Tuple Space Search) algorithm in Open vSwitch 2.x through 2.17.2 and 3.0.0 allows remote     attackers to cause a denial of service (delays of legitimate traffic) via crafted packet data that     requires excessive evaluation time within the packet classification algorithm for the MegaFlow cache, aka     a Tuple Space Explosion (TSE) attack. (CVE-2019-25076)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair() (CVE-2020-10723)

  - openvswitch: Integer Underflow in Organization Specific TLV (CVE-2022-4338)

  - A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in     vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory     corruption. (CVE-2020-10722)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0931 advisory.

    Open vSwitch provides standard network bridging functions and support for     the OpenFlow protocol for remote per-flow control of traffic.

    OVN, the Open Virtual Network, is a system to support virtual network     abstraction.  OVN complements the existing capabilities of OVS to add native support for virtual network     abstractions, such as virtual L2 and L3 overlays and security groups.

    Security Fix(es):

    * buffer overflow in the lldp_decode function in daemon/protocols/lldp.c     (CVE-2015-8011)

    * librte_vhost Integer overflow in vhost_user_set_log_base()     (CVE-2020-10722)

    * librte_vhost Integer truncation in     vhost_user_check_and_alloc_queue_pair() (CVE-2020-10723)

    * librte_vhost Missing inputs validation in Vhost-crypto (CVE-2020-10724)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.02, has dpdk packages installed that are affected by multiple vulnerabilities:

  - A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation     fault of the vhost-user backend application running on the host, which could result in a loss of     connectivity for the other guests running on that host. This is caused by a missing validity check of the     descriptor address in the function `virtio_dev_rx_batch_packed()`. (CVE-2020-10725)

  - A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct access     to the vhost-user socket can keep sending VHOST_USER_GET_INFLIGHT_FD messages, causing a resource leak     (file descriptors and virtual memory), which may result in a denial of service. (CVE-2020-10726)

  - A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in     vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory     corruption. (CVE-2020-10722)

  - A memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an integer     truncation on the index of a payload. Under certain circumstances, the index (a UInt) is copied and     truncated into a uint16, which can lead to out of bound indexing and possible memory corruption.
    (CVE-2020-10723)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4806 advisory.

  - dpdk: librte_vhost Integer overflow in vhost_user_set_log_base() (CVE-2020-10722)

  - dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair() (CVE-2020-10723)

  - dpdk: librte_vhost Malicious guest could cause segfault by sending invalid Virtio descriptor     (CVE-2020-10725)

  - dpdk: librte_vhost VHOST_USER_GET_INFLIGHT_FD message flooding to result in a DoS (CVE-2020-10726)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4806 advisory.

    [19.11.3-1]
    - Rebase DPDK to 19.11.3 (#1868708)

    [19.11.2-1]
    - Rebase DPDK to 19.11.2 (#1836830, #1837024, #1837030, #1837022)

    [19.11.1-1]
    - Rebase DPDK to 19.11.1 (#1824905)
    - Remove dpdk-pmdinfo.py (#1801361)
    - Add Requires: rdma-core-devel libmnl-devel on x86_64 for dpdk-devel (#1813252)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4806 advisory.

    The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast     packet processing in the user space.

    The following packages have been upgraded to a later upstream version: dpdk (19.11.3). (BZ#1824905)

    Security Fix(es):

    * dpdk: librte_vhost Malicious guest could cause segfault by sending invalid Virtio descriptor     (CVE-2020-10725)

    * dpdk: librte_vhost Integer overflow in vhost_user_set_log_base() (CVE-2020-10722)

    * dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair() (CVE-2020-10723)

    * dpdk: librte_vhost VHOST_USER_GET_INFLIGHT_FD message flooding to result in a DoS (CVE-2020-10726)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4114 advisory.

    ovirt-ansible-repositories is an Ansible role used to set up the repositories required for oVirt engine or     host installation.

    The openvswitch package contains components for enabling Open vSwitch; a software-based Ethernet virtual     switch. It also includes OVN (Open Virtual Network) components for supporting virtual network abstraction.

    The Red Hat Virtualization Python SDK is a program that simplifies access to the Red Hat Virtualization     API by providing an object-oriented view to developers.

    Security Fix(es):

    * dpdk: librte_vhost Interger overflow in vhost_user_set_log_base() (CVE-2020-10722)

    * dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair() (CVE-2020-10723)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * Previously, during RHHI-V deployment of 3 hosts using ovirt-ansible-hosted-engine-setup, the Self-Hosted     Engine was added to the default cluster, but the additional 2 hosts were not added.
    In this release, deployment with ovirt-ansible-hosted-engine-setup successfully adds all hosts to the     cluster. (BZ#1855283)

    * Previously, when creating large numbers of virtual machines (~2300 VMs), the associated Data Centers     became unresponsive, and the hosts did not have Storage Pool Managers (SPM).
    With this release, large scale deployment of virtual machines succeeds without errors. (BZ#1849558)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the dpdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in DPDK versions 18.05 and     above. A missing check for an integer overflow in     vhost_user_set_log_base() could result in a smaller     memory map than requested, possibly allowing memory     corruption.(CVE-2020-10722)

  - A memory corruption issue was found in DPDK versions     17.05 and above. This flaw is caused by an integer     truncation on the index of a payload. Under certain     circumstances, the index (a UInt) is copied and     truncated into a uint16, which can lead to out of bound     indexing and possible memory     corruption.(CVE-2020-10723)

  - A vulnerability was found in DPDK versions 18.11 and     above. The vhost-crypto library code is missing     validations for user-supplied values, potentially     allowing an information leak through an out-of-bounds     memory read.(CVE-2020-10724)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for dpdk to version 16.11.9 following issue :

CVE-2019-14818: Fixed a memory leak vulnerability caused by a malicious container may lead to to denial of service (bsc#1156146).

CVE-2020-12693: Fixed an authentication bypass via an alternate path or channel (boo#1172004).

rebuilt with new signing key. (bsc#1174543)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the dpdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in DPDK versions 18.11 and     above. The vhost-crypto library code is missing     validations for user-supplied values, potentially     allowing an information leak through an out-of-bounds     memory read.(CVE-2020-10724)

  - A vulnerability was found in DPDK versions 18.05 and     above. A missing check for an integer overflow in     vhost_user_set_log_base() could result in a smaller     memory map than requested, possibly allowing memory     corruption.(CVE-2020-10722)

  - A memory corruption issue was found in DPDK versions     17.05 and above. This flaw is caused by an integer     truncation on the index of a payload. Under certain     circumstances, the index (a UInt) is copied and     truncated into a uint16, which can lead to out of bound     indexing and possible memory     corruption.(CVE-2020-10723)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2683 advisory.

    The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast     packet processing in the user space.

    The following packages have been upgraded to a later upstream version: dpdk (18.11.8). (BZ#1825276)

    Security Fix(es):

    * dpdk: librte_vhost Interger overflow in vhost_user_set_log_base() (CVE-2020-10722)

    * dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair() (CVE-2020-10723)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for dpdk fixes the following issues :

CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171930).

CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171925).

CVE-2020-10724: Fixed a missing inputs validation in Vhost-crypto (bsc#1171926).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for dpdk to 17.11.7 fixes the following issues :

Security issues fixed :

CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171477 bsc#1171930).

CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171477).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix cvws CVE-2020-10726,CVE-2020-10724,CVE-2020-10723,CVE-2020-10722,CVE-2020-1 0725

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2298 advisory.

    Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote     per-flow control of traffic.

    Security Fix(es):

    * dpdk: librte_vhost Interger overflow in vhost_user_set_log_base() (CVE-2020-10722)

    * dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair() (CVE-2020-10723)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * OVS causing high pings and latency inside guest VM when an active DPDK port fails (BZ#1822198)

    * SEGV after recirculation in batch processing in vswitchd 2.9.0 (BZ#1826886)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2297 advisory.

    Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote     per-flow control of traffic.

    Security Fix(es):

    * dpdk: librte_vhost Interger overflow in vhost_user_set_log_base() (CVE-2020-10722)

    * dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair() (CVE-2020-10723)

    * dpdk: librte_vhost Missing inputs validation in Vhost-crypto (CVE-2020-10724)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * [RHEL8] Update OVS 2.11 to last branch-2.11 commit and DPDK 18.11.7 (BZ#1822654)

    * [RHEL8] ingress qdisc gets removed (BZ#1826827)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2295 advisory.

    Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote     per-flow control of traffic.

    Security Fix(es):

    * dpdk: librte_vhost Malicious guest could cause segfault by sending invalid Virtio descriptor     (CVE-2020-10725)

    * dpdk: librte_vhost Interger overflow in vhost_user_set_log_base() (CVE-2020-10722)

    * dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair() (CVE-2020-10723)

    * dpdk: librte_vhost Missing inputs validation in Vhost-crypto (CVE-2020-10724)

    * dpdk: librte_vhost VHOST_USER_GET_INFLIGHT_FD message flooding to result in a DoS (CVE-2020-10726)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * DPDK virtio_user lack of notifications make vhost_net+napi stops tx buffers (BZ#1803082)

    * Update internal DPDK to 19.11.1 (BZ#1824825)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2296 advisory.

    Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote     per-flow control of traffic.

    Security Fix(es):

    * dpdk: librte_vhost Interger overflow in vhost_user_set_log_base() (CVE-2020-10722)

    * dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair() (CVE-2020-10723)

    * dpdk: librte_vhost Missing inputs validation in Vhost-crypto (CVE-2020-10724)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * [RHEL7] Update OVS 2.11 to last branch-2.11 commit and DPDK 18.11.7 (BZ#1822653)

    * [RHEL7] ingress qdisc gets removed (BZ#1826826)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for dpdk fixes the following issues :

Security issues fixed :

  - CVE-2020-10722: Fixed an integer overflow in     vhost_user_set_log_base() (bsc#1171477).

  - CVE-2020-10723: Fixed an integer truncation in     vhost_user_check_and_alloc_queue_pair() (bsc#1171477).

  - CVE-2020-10724: Fixed a missing inputs validation in     Vhost-crypto (bsc#1171477).

  - CVE-2020-10725: Fixed a segfault caused by invalid     virtio descriptors sent from a malicious guest     (bsc#1171477).

  - CVE-2020-10726: Fixed a denial-of-service caused by     VHOST_USER_GET_INFLIGHT_FD message flooding     (bsc#1171477).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

This update for dpdk fixes the following issues :

Security issues fixed :

CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171477).

CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171477).

CVE-2020-10724: Fixed a missing inputs validation in Vhost-crypto (bsc#1171477).

CVE-2020-10725: Fixed a segfault caused by invalid virtio descriptors sent from a malicious guest (bsc#1171477).

CVE-2020-10726: Fixed a denial-of-service caused by VHOST_USER_GET_INFLIGHT_FD message flooding (bsc#1171477).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4362-1 advisory.

    It was discovered that DPDK incorrectly handled certain inputs. An attacker could possibly use this issue     to cause a crash or execute arbitrary code. (CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,     CVE-2020-10725, CVE-2020-10726)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Multiple vulnerabilities were discovered in the vhost code of DPDK, a set of libraries for fast packet processing, which could result in denial of service or the execution of arbitrary code by malicious guests/containers.

ID	Name	Product	Family	Severity
208503	CentOS 7 : dpdk (RHSA-2020:2683)	Nessus	CentOS Local Security Checks	medium
199866	RHEL 7 : openvswitch (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
199862	RHEL 8 : openvswitch (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
147881	RHEL 7 : openvswitch2.11 and ovn2.11 (RHSA-2021:0931)	Nessus	Red Hat Local Security Checks	critical
147295	NewStart CGSL MAIN 6.02 : dpdk Multiple Vulnerabilities (NS-SA-2021-0073)	Nessus	NewStart CGSL Local Security Checks	medium
145980	CentOS 8 : dpdk (CESA-2020:4806)	Nessus	CentOS Local Security Checks	medium
142795	Oracle Linux 8 : dpdk (ELSA-2020-4806)	Nessus	Oracle Linux Local Security Checks	medium
142390	RHEL 8 : dpdk (RHSA-2020:4806)	Nessus	Red Hat Local Security Checks	medium
141123	RHEL 7 : Red Hat Virtualization (RHSA-2020:4114)	Nessus	Red Hat Local Security Checks	medium
140157	EulerOS 2.0 SP5 : dpdk (EulerOS-SA-2020-1936)	Nessus	Huawei Local Security Checks	medium
139532	SUSE SLES12 Security Update : dpdk (SUSE-SU-2020:2194-1)	Nessus	SuSE Local Security Checks	high
139130	EulerOS 2.0 SP8 : dpdk (EulerOS-SA-2020-1800)	Nessus	Huawei Local Security Checks	medium
137894	RHEL 7 : dpdk (RHSA-2020:2683)	Nessus	Red Hat Local Security Checks	medium
137591	SUSE SLES12 Security Update : dpdk (SUSE-SU-2020:1552-1)	Nessus	SuSE Local Security Checks	medium
137544	SUSE SLES12 Security Update : dpdk (SUSE-SU-2020:1430-1)	Nessus	SuSE Local Security Checks	medium
137103	Fedora 32 : 2:dpdk (2020-04e3d34451)	Nessus	Fedora Local Security Checks	medium
136913	RHEL 7 : openvswitch (RHSA-2020:2298)	Nessus	Red Hat Local Security Checks	medium
136912	RHEL 8 : openvswitch2.11 (RHSA-2020:2297)	Nessus	Red Hat Local Security Checks	medium
136899	RHEL 8 : openvswitch2.13 (RHSA-2020:2295)	Nessus	Red Hat Local Security Checks	medium
136898	RHEL 7 : openvswitch2.11 (RHSA-2020:2296)	Nessus	Red Hat Local Security Checks	medium
136882	openSUSE Security Update : dpdk (openSUSE-2020-693)	Nessus	SuSE Local Security Checks	medium
136795	SUSE SLED15 / SLES15 Security Update : dpdk (SUSE-SU-2020:1335-1)	Nessus	SuSE Local Security Checks	medium
136709	Ubuntu 18.04 LTS / 20.04 LTS : DPDK vulnerabilities (USN-4362-1)	Nessus	Ubuntu Local Security Checks	medium
136703	Debian DSA-4688-1 : dpdk - security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2020-10722

medium

Tenable Plugins

medium

critical

critical

critical

medium

medium

medium

medium

medium

medium

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium