Описание
Security update for dpdk-thunderxdpdk
This update fixes the following issues:
- CVE-2018-1059: The DPDK vhost-user interface did not check to verify that all the requested guest physical range was mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may have lead to a malicious guest exposing vhost-user backend process memory (bsc#1089638).
This update was imported from the SUSE:SLE-12-SP3:Update update project.
Список пакетов
openSUSE Leap 42.3
dpdk-16.11.6-6.5.1
dpdk-devel-16.11.6-6.5.1
dpdk-doc-16.11.6-6.5.1
dpdk-examples-16.11.6-6.5.1
dpdk-kmp-default-16.11.6_k4.4.132_53-6.5.1
dpdk-tools-16.11.6-6.5.1
Ссылки
- E-Mail link for openSUSE-SU-2018:1560-1
- SUSE Security Ratings
Описание
The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable.
Затронутые продукты
openSUSE Leap 42.3:dpdk-16.11.6-6.5.1
openSUSE Leap 42.3:dpdk-devel-16.11.6-6.5.1
openSUSE Leap 42.3:dpdk-doc-16.11.6-6.5.1
openSUSE Leap 42.3:dpdk-examples-16.11.6-6.5.1
Ссылки
- CVE-2018-1059
- SUSE Bug 1089638
- SUSE Bug 1090647