A vulnerability was found in DPDK versions 18.11 and above. The vhost-crypto library code is missing validations for user-supplied values, potentially allowing an information leak through an out-of-bounds memory read.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0931 advisory.

    Open vSwitch provides standard network bridging functions and support for     the OpenFlow protocol for remote per-flow control of traffic.

    OVN, the Open Virtual Network, is a system to support virtual network     abstraction.  OVN complements the existing capabilities of OVS to add native support for virtual network     abstractions, such as virtual L2 and L3 overlays and security groups.

    Security Fix(es):

    * buffer overflow in the lldp_decode function in daemon/protocols/lldp.c     (CVE-2015-8011)

    * librte_vhost Integer overflow in vhost_user_set_log_base()     (CVE-2020-10722)

    * librte_vhost Integer truncation in     vhost_user_check_and_alloc_queue_pair() (CVE-2020-10723)

    * librte_vhost Missing inputs validation in Vhost-crypto (CVE-2020-10724)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the dpdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in DPDK versions 18.05 and     above. A missing check for an integer overflow in     vhost_user_set_log_base() could result in a smaller     memory map than requested, possibly allowing memory     corruption.(CVE-2020-10722)

  - A memory corruption issue was found in DPDK versions     17.05 and above. This flaw is caused by an integer     truncation on the index of a payload. Under certain     circumstances, the index (a UInt) is copied and     truncated into a uint16, which can lead to out of bound     indexing and possible memory     corruption.(CVE-2020-10723)

  - A vulnerability was found in DPDK versions 18.11 and     above. The vhost-crypto library code is missing     validations for user-supplied values, potentially     allowing an information leak through an out-of-bounds     memory read.(CVE-2020-10724)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the dpdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in DPDK versions 18.11 and     above. The vhost-crypto library code is missing     validations for user-supplied values, potentially     allowing an information leak through an out-of-bounds     memory read.(CVE-2020-10724)

  - A vulnerability was found in DPDK versions 18.05 and     above. A missing check for an integer overflow in     vhost_user_set_log_base() could result in a smaller     memory map than requested, possibly allowing memory     corruption.(CVE-2020-10722)

  - A memory corruption issue was found in DPDK versions     17.05 and above. This flaw is caused by an integer     truncation on the index of a payload. Under certain     circumstances, the index (a UInt) is copied and     truncated into a uint16, which can lead to out of bound     indexing and possible memory     corruption.(CVE-2020-10723)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for dpdk fixes the following issues :

CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171930).

CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171925).

CVE-2020-10724: Fixed a missing inputs validation in Vhost-crypto (bsc#1171926).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix cvws CVE-2020-10726,CVE-2020-10724,CVE-2020-10723,CVE-2020-10722,CVE-2020-1 0725

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2297 advisory.

    Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote     per-flow control of traffic.

    Security Fix(es):

    * dpdk: librte_vhost Interger overflow in vhost_user_set_log_base() (CVE-2020-10722)

    * dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair() (CVE-2020-10723)

    * dpdk: librte_vhost Missing inputs validation in Vhost-crypto (CVE-2020-10724)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * [RHEL8] Update OVS 2.11 to last branch-2.11 commit and DPDK 18.11.7 (BZ#1822654)

    * [RHEL8] ingress qdisc gets removed (BZ#1826827)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2295 advisory.

    Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote     per-flow control of traffic.

    Security Fix(es):

    * dpdk: librte_vhost Malicious guest could cause segfault by sending invalid Virtio descriptor     (CVE-2020-10725)

    * dpdk: librte_vhost Interger overflow in vhost_user_set_log_base() (CVE-2020-10722)

    * dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair() (CVE-2020-10723)

    * dpdk: librte_vhost Missing inputs validation in Vhost-crypto (CVE-2020-10724)

    * dpdk: librte_vhost VHOST_USER_GET_INFLIGHT_FD message flooding to result in a DoS (CVE-2020-10726)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * DPDK virtio_user lack of notifications make vhost_net+napi stops tx buffers (BZ#1803082)

    * Update internal DPDK to 19.11.1 (BZ#1824825)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2296 advisory.

    Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote     per-flow control of traffic.

    Security Fix(es):

    * dpdk: librte_vhost Interger overflow in vhost_user_set_log_base() (CVE-2020-10722)

    * dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair() (CVE-2020-10723)

    * dpdk: librte_vhost Missing inputs validation in Vhost-crypto (CVE-2020-10724)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * [RHEL7] Update OVS 2.11 to last branch-2.11 commit and DPDK 18.11.7 (BZ#1822653)

    * [RHEL7] ingress qdisc gets removed (BZ#1826826)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for dpdk fixes the following issues :

Security issues fixed :

  - CVE-2020-10722: Fixed an integer overflow in     vhost_user_set_log_base() (bsc#1171477).

  - CVE-2020-10723: Fixed an integer truncation in     vhost_user_check_and_alloc_queue_pair() (bsc#1171477).

  - CVE-2020-10724: Fixed a missing inputs validation in     Vhost-crypto (bsc#1171477).

  - CVE-2020-10725: Fixed a segfault caused by invalid     virtio descriptors sent from a malicious guest     (bsc#1171477).

  - CVE-2020-10726: Fixed a denial-of-service caused by     VHOST_USER_GET_INFLIGHT_FD message flooding     (bsc#1171477).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

This update for dpdk fixes the following issues :

Security issues fixed :

CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171477).

CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171477).

CVE-2020-10724: Fixed a missing inputs validation in Vhost-crypto (bsc#1171477).

CVE-2020-10725: Fixed a segfault caused by invalid virtio descriptors sent from a malicious guest (bsc#1171477).

CVE-2020-10726: Fixed a denial-of-service caused by VHOST_USER_GET_INFLIGHT_FD message flooding (bsc#1171477).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4362-1 advisory.

    It was discovered that DPDK incorrectly handled certain inputs. An attacker could possibly use this issue     to cause a crash or execute arbitrary code. (CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,     CVE-2020-10725, CVE-2020-10726)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Multiple vulnerabilities were discovered in the vhost code of DPDK, a set of libraries for fast packet processing, which could result in denial of service or the execution of arbitrary code by malicious guests/containers.

ID	Name	Product	Family	Severity
147881	RHEL 7 : openvswitch2.11 and ovn2.11 (RHSA-2021:0931)	Nessus	Red Hat Local Security Checks	critical
140157	EulerOS 2.0 SP5 : dpdk (EulerOS-SA-2020-1936)	Nessus	Huawei Local Security Checks	medium
139130	EulerOS 2.0 SP8 : dpdk (EulerOS-SA-2020-1800)	Nessus	Huawei Local Security Checks	medium
137591	SUSE SLES12 Security Update : dpdk (SUSE-SU-2020:1552-1)	Nessus	SuSE Local Security Checks	medium
137103	Fedora 32 : 2:dpdk (2020-04e3d34451)	Nessus	Fedora Local Security Checks	medium
136912	RHEL 8 : openvswitch2.11 (RHSA-2020:2297)	Nessus	Red Hat Local Security Checks	medium
136899	RHEL 8 : openvswitch2.13 (RHSA-2020:2295)	Nessus	Red Hat Local Security Checks	medium
136898	RHEL 7 : openvswitch2.11 (RHSA-2020:2296)	Nessus	Red Hat Local Security Checks	medium
136882	openSUSE Security Update : dpdk (openSUSE-2020-693)	Nessus	SuSE Local Security Checks	medium
136795	SUSE SLED15 / SLES15 Security Update : dpdk (SUSE-SU-2020:1335-1)	Nessus	SuSE Local Security Checks	medium
136709	Ubuntu 18.04 LTS / 20.04 LTS : DPDK vulnerabilities (USN-4362-1)	Nessus	Ubuntu Local Security Checks	medium
136703	Debian DSA-4688-1 : dpdk - security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2020-10724

medium

Tenable Plugins

critical

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium