Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2018-1059 (GCVE-0-2018-1059)
Vulnerability from cvelistv5
Published
2018-04-24 18:00
Modified
2024-09-17 00:46
Severity ?
VLAI Severity ?
EPSS score ?
Summary
The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Red Hat, Inc. | DPDK |
Version: before 18.02.1 |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T03:44:11.812Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "RHSA-2018:2524",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2524"
},
{
"name": "RHSA-2018:2102",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2102"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://access.redhat.com/security/cve/cve-2018-1059"
},
{
"name": "USN-3642-2",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/3642-2/"
},
{
"name": "RHSA-2018:2038",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2038"
},
{
"name": "USN-3642-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/3642-1/"
},
{
"name": "RHSA-2018:1267",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1267"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "DPDK",
"vendor": "Red Hat, Inc.",
"versions": [
{
"status": "affected",
"version": "before 18.02.1"
}
]
}
],
"datePublic": "2018-04-23T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "CWE-200",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-08-21T09:57:01",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "RHSA-2018:2524",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2524"
},
{
"name": "RHSA-2018:2102",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2102"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://access.redhat.com/security/cve/cve-2018-1059"
},
{
"name": "USN-3642-2",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/3642-2/"
},
{
"name": "RHSA-2018:2038",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2038"
},
{
"name": "USN-3642-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/3642-1/"
},
{
"name": "RHSA-2018:1267",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1267"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "[email protected]",
"DATE_PUBLIC": "2018-04-23T00:00:00",
"ID": "CVE-2018-1059",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "DPDK",
"version": {
"version_data": [
{
"version_value": "before 18.02.1"
}
]
}
}
]
},
"vendor_name": "Red Hat, Inc."
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-200"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "RHSA-2018:2524",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2524"
},
{
"name": "RHSA-2018:2102",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2102"
},
{
"name": "https://access.redhat.com/security/cve/cve-2018-1059",
"refsource": "MISC",
"url": "https://access.redhat.com/security/cve/cve-2018-1059"
},
{
"name": "USN-3642-2",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/3642-2/"
},
{
"name": "RHSA-2018:2038",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2038"
},
{
"name": "USN-3642-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/3642-1/"
},
{
"name": "RHSA-2018:1267",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1267"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298",
"refsource": "CONFIRM",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2018-1059",
"datePublished": "2018-04-24T18:00:00Z",
"dateReserved": "2017-12-04T00:00:00",
"dateUpdated": "2024-09-17T00:46:47.514Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2018-1059\",\"sourceIdentifier\":\"[email protected]\",\"published\":\"2018-04-24T18:29:00.233\",\"lastModified\":\"2024-11-21T03:59:05.420\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable.\"},{\"lang\":\"es\",\"value\":\"La interfaz vhost de usuario de DPDK no verifica que el rango f\u00edsico invitado solicitado est\u00e9 mapeado y sea contiguo al realizar traducciones de direcciones f\u00edsicas de invitado a direcciones virtuales del host. Esto podr\u00eda conducir a que un invitado malicioso exponga la memoria del proceso del backend del usuario vhost. Todas las versiones anteriores a la 18.02.1 son vulnerables.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"[email protected]\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N\",\"baseScore\":6.1,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"ADJACENT_NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":1.6,\"impactScore\":4.0}],\"cvssMetricV2\":[{\"source\":\"[email protected]\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:A/AC:M/Au:N/C:P/I:N/A:N\",\"baseScore\":2.9,\"accessVector\":\"ADJACENT_NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"LOW\",\"exploitabilityScore\":5.5,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"[email protected]\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-200\"}]},{\"source\":\"[email protected]\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-200\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9070C9D8-A14A-467F-8253-33B966C16886\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:ceph_storage:3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"516F4E8E-ED2F-4282-9DAB-D8B378F61258\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:enterprise_linux_fast_datapath:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"559A4609-EC7E-40CD-9165-5DA68CBCEE9B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openshift:3.0:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"45690263-84D9-45A1-8C30-3ED2F0F11F47\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E8B8C725-34CF-4340-BE7B-37E58CF706D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F40C26BE-56CB-4022-A1D8-3CA0A8F87F4B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E722FEF7-58A6-47AD-B1D0-DB0B71B0C7AA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openstack:11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4E9AF77C-5D49-4842-9817-AD710A919073\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D4AC996-B340-4A14-86F7-FF83B4D5EC8F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6BBD7A51-0590-4DDF-8249-5AFA8D645CB6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:virtualization:4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"03EB0F63-DB24-4240-BC44-C92BAE7EAF42\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:virtualization_manager:4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AF786B57-02C3-48B7-B902-318356B3A3B6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"142AD0DD-4CF3-4D74-9442-459CE3347E3A\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dpdk:data_plane_development_kit:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"18.02.1\",\"matchCriteriaId\":\"723DDE45-6CD8-4486-B742-FCFA0EA88873\"}]}]}],\"references\":[{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1267\",\"source\":\"[email protected]\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2038\",\"source\":\"[email protected]\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2102\",\"source\":\"[email protected]\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2524\",\"source\":\"[email protected]\"},{\"url\":\"https://access.redhat.com/security/cve/cve-2018-1059\",\"source\":\"[email protected]\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1544298\",\"source\":\"[email protected]\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3642-1/\",\"source\":\"[email protected]\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3642-2/\",\"source\":\"[email protected]\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1267\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2038\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2102\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2524\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/security/cve/cve-2018-1059\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1544298\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3642-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3642-2/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}"
}
}
rhea-2018:1547
Vulnerability from csaf_redhat
Published
2018-05-15 17:46
Modified
2024-11-14 23:33
Summary
Red Hat Enhancement Advisory: openvswitch bug fix and enhancement update
Notes
Topic
Updated openvswitch packages that fix several bugs and add various enhancements are now available.
Details
The openvswitch package contains components for enabling Open vSwitch, a software-based Ethernet virtual switch. It also includes OVN (Open Virtual Network) components for supporting virtual network abstraction.
Consume openvswitch in RHEL 7 RHV 4.2
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated openvswitch packages that fix several bugs and add various enhancements are now available.",
"title": "Topic"
},
{
"category": "general",
"text": "The openvswitch package contains components for enabling Open vSwitch, a software-based Ethernet virtual switch. It also includes OVN (Open Virtual Network) components for supporting virtual network abstraction.\n\nConsume openvswitch in RHEL 7 RHV 4.2",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHEA-2018:1547",
"url": "https://access.redhat.com/errata/RHEA-2018:1547"
},
{
"category": "external",
"summary": "1502612",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502612"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhea-2018_1547.json"
}
],
"title": "Red Hat Enhancement Advisory: openvswitch bug fix and enhancement update",
"tracking": {
"current_release_date": "2024-11-14T23:33:11+00:00",
"generator": {
"date": "2024-11-14T23:33:11+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHEA-2018:1547",
"initial_release_date": "2018-05-15T17:46:30+00:00",
"revision_history": [
{
"date": "2018-05-15T17:46:30+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-05-15T17:46:30+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T23:33:11+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHV-M 4.2",
"product": {
"name": "RHV-M 4.2",
"product_id": "7Server-RHV-S-4.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhev_manager:4.2"
}
}
}
],
"category": "product_family",
"name": "Red Hat Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-19.el7fdp.src",
"product": {
"name": "openvswitch-0:2.9.0-19.el7fdp.src",
"product_id": "openvswitch-0:2.9.0-19.el7fdp.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"product": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"product_id": "python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.src as a component of RHV-M 4.2",
"product_id": "7Server-RHV-S-4.2:openvswitch-0:2.9.0-19.el7fdp.src"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.src",
"relates_to_product_reference": "7Server-RHV-S-4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.x86_64 as a component of RHV-M 4.2",
"product_id": "7Server-RHV-S-4.2:openvswitch-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RHV-S-4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64 as a component of RHV-M 4.2",
"product_id": "7Server-RHV-S-4.2:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RHV-S-4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64 as a component of RHV-M 4.2",
"product_id": "7Server-RHV-S-4.2:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RHV-S-4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64 as a component of RHV-M 4.2",
"product_id": "7Server-RHV-S-4.2:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RHV-S-4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64 as a component of RHV-M 4.2",
"product_id": "7Server-RHV-S-4.2:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RHV-S-4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64 as a component of RHV-M 4.2",
"product_id": "7Server-RHV-S-4.2:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RHV-S-4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.noarch as a component of RHV-M 4.2",
"product_id": "7Server-RHV-S-4.2:python-openvswitch-0:2.9.0-19.el7fdp.noarch"
},
"product_reference": "python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"relates_to_product_reference": "7Server-RHV-S-4.2"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Maxime Coquelin"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2018-1059",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2018-01-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1544298"
}
],
"notes": [
{
"category": "description",
"text": "The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dpdk: Information exposure in unchecked guest physical to host virtual address translations",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat OpenStack Platform versions 7 to 9 provided openvswitch-dpdk as a technical preview for customers, it was provided without support and is not intended on being deployed in production.\n\nRed Hat Ceph Storage version 3 provides ceph bundled with DPDK as a technical preview for customers. It was provided without support and is not intended on being deployed in production.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHV-S-4.2:openvswitch-0:2.9.0-19.el7fdp.src",
"7Server-RHV-S-4.2:openvswitch-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:python-openvswitch-0:2.9.0-19.el7fdp.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
},
{
"category": "external",
"summary": "RHBZ#1544298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1059",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2018-1059",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
}
],
"release_date": "2018-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-15T17:46:30+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/2974891",
"product_ids": [
"7Server-RHV-S-4.2:openvswitch-0:2.9.0-19.el7fdp.src",
"7Server-RHV-S-4.2:openvswitch-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:python-openvswitch-0:2.9.0-19.el7fdp.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHEA-2018:1547"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RHV-S-4.2:openvswitch-0:2.9.0-19.el7fdp.src",
"7Server-RHV-S-4.2:openvswitch-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:python-openvswitch-0:2.9.0-19.el7fdp.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dpdk: Information exposure in unchecked guest physical to host virtual address translations"
}
]
}
rhsa-2018_2524
Vulnerability from csaf_redhat
Published
2018-08-20 13:01
Modified
2024-11-14 23:44
Summary
Red Hat Security Advisory: openvswitch security and bug fix update
Notes
Topic
An update for openvswitch is now available for Red Hat OpenStack Platform 12.0 (Pike).
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic.
Security Fix(es):
* dpdk: Information exposure in unchecked guest physical to host virtual address translations (CVE-2018-1059)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
This issue was discovered by Maxime Coquelin (Red Hat).
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for openvswitch is now available for Red Hat OpenStack Platform 12.0 (Pike).\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic.\n\nSecurity Fix(es):\n\n* dpdk: Information exposure in unchecked guest physical to host virtual address translations (CVE-2018-1059)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nThis issue was discovered by Maxime Coquelin (Red Hat).",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2524",
"url": "https://access.redhat.com/errata/RHSA-2018:2524"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1544298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"category": "external",
"summary": "1547518",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1547518"
},
{
"category": "external",
"summary": "1561969",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1561969"
},
{
"category": "external",
"summary": "1583749",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1583749"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2524.json"
}
],
"title": "Red Hat Security Advisory: openvswitch security and bug fix update",
"tracking": {
"current_release_date": "2024-11-14T23:44:57+00:00",
"generator": {
"date": "2024-11-14T23:44:57+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2018:2524",
"initial_release_date": "2018-08-20T13:01:03+00:00",
"revision_history": [
{
"date": "2018-08-20T13:01:03+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-08-20T13:01:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T23:44:57+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 12.0",
"product": {
"name": "Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:12::el7"
}
}
},
{
"category": "product_name",
"name": "OpenStack 12.0 Tools for RHEL 7",
"product": {
"name": "OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:12::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"product": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"product_id": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"product": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"product_id": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"product": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"product_id": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"product": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"product_id": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"product": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"product_id": "openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"product": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"product_id": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"product": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"product_id": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"product": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"product_id": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"product": {
"name": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"product_id": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.src as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.src"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch"
},
"product_reference": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
},
"product_reference": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.ppc64le as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.src as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.src"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch"
},
"product_reference": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
},
"product_reference": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Maxime Coquelin"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2018-1059",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2018-01-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1544298"
}
],
"notes": [
{
"category": "description",
"text": "The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dpdk: Information exposure in unchecked guest physical to host virtual address translations",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat OpenStack Platform versions 7 to 9 provided openvswitch-dpdk as a technical preview for customers, it was provided without support and is not intended on being deployed in production.\n\nRed Hat Ceph Storage version 3 provides ceph bundled with DPDK as a technical preview for customers. It was provided without support and is not intended on being deployed in production.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-12.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-12.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
},
{
"category": "external",
"summary": "RHBZ#1544298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1059",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2018-1059",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
}
],
"release_date": "2018-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-20T13:01:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-12.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-12.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2524"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-12.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-12.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dpdk: Information exposure in unchecked guest physical to host virtual address translations"
}
]
}
RHEA-2018:1547
Vulnerability from csaf_redhat
Published
2018-05-15 17:46
Modified
2024-11-14 23:33
Summary
Red Hat Enhancement Advisory: openvswitch bug fix and enhancement update
Notes
Topic
Updated openvswitch packages that fix several bugs and add various enhancements are now available.
Details
The openvswitch package contains components for enabling Open vSwitch, a software-based Ethernet virtual switch. It also includes OVN (Open Virtual Network) components for supporting virtual network abstraction.
Consume openvswitch in RHEL 7 RHV 4.2
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated openvswitch packages that fix several bugs and add various enhancements are now available.",
"title": "Topic"
},
{
"category": "general",
"text": "The openvswitch package contains components for enabling Open vSwitch, a software-based Ethernet virtual switch. It also includes OVN (Open Virtual Network) components for supporting virtual network abstraction.\n\nConsume openvswitch in RHEL 7 RHV 4.2",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHEA-2018:1547",
"url": "https://access.redhat.com/errata/RHEA-2018:1547"
},
{
"category": "external",
"summary": "1502612",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502612"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhea-2018_1547.json"
}
],
"title": "Red Hat Enhancement Advisory: openvswitch bug fix and enhancement update",
"tracking": {
"current_release_date": "2024-11-14T23:33:11+00:00",
"generator": {
"date": "2024-11-14T23:33:11+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHEA-2018:1547",
"initial_release_date": "2018-05-15T17:46:30+00:00",
"revision_history": [
{
"date": "2018-05-15T17:46:30+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-05-15T17:46:30+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T23:33:11+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHV-M 4.2",
"product": {
"name": "RHV-M 4.2",
"product_id": "7Server-RHV-S-4.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhev_manager:4.2"
}
}
}
],
"category": "product_family",
"name": "Red Hat Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-19.el7fdp.src",
"product": {
"name": "openvswitch-0:2.9.0-19.el7fdp.src",
"product_id": "openvswitch-0:2.9.0-19.el7fdp.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"product": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"product_id": "python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.src as a component of RHV-M 4.2",
"product_id": "7Server-RHV-S-4.2:openvswitch-0:2.9.0-19.el7fdp.src"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.src",
"relates_to_product_reference": "7Server-RHV-S-4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.x86_64 as a component of RHV-M 4.2",
"product_id": "7Server-RHV-S-4.2:openvswitch-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RHV-S-4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64 as a component of RHV-M 4.2",
"product_id": "7Server-RHV-S-4.2:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RHV-S-4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64 as a component of RHV-M 4.2",
"product_id": "7Server-RHV-S-4.2:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RHV-S-4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64 as a component of RHV-M 4.2",
"product_id": "7Server-RHV-S-4.2:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RHV-S-4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64 as a component of RHV-M 4.2",
"product_id": "7Server-RHV-S-4.2:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RHV-S-4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64 as a component of RHV-M 4.2",
"product_id": "7Server-RHV-S-4.2:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RHV-S-4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.noarch as a component of RHV-M 4.2",
"product_id": "7Server-RHV-S-4.2:python-openvswitch-0:2.9.0-19.el7fdp.noarch"
},
"product_reference": "python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"relates_to_product_reference": "7Server-RHV-S-4.2"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Maxime Coquelin"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2018-1059",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2018-01-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1544298"
}
],
"notes": [
{
"category": "description",
"text": "The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dpdk: Information exposure in unchecked guest physical to host virtual address translations",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat OpenStack Platform versions 7 to 9 provided openvswitch-dpdk as a technical preview for customers, it was provided without support and is not intended on being deployed in production.\n\nRed Hat Ceph Storage version 3 provides ceph bundled with DPDK as a technical preview for customers. It was provided without support and is not intended on being deployed in production.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHV-S-4.2:openvswitch-0:2.9.0-19.el7fdp.src",
"7Server-RHV-S-4.2:openvswitch-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:python-openvswitch-0:2.9.0-19.el7fdp.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
},
{
"category": "external",
"summary": "RHBZ#1544298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1059",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2018-1059",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
}
],
"release_date": "2018-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-15T17:46:30+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/2974891",
"product_ids": [
"7Server-RHV-S-4.2:openvswitch-0:2.9.0-19.el7fdp.src",
"7Server-RHV-S-4.2:openvswitch-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:python-openvswitch-0:2.9.0-19.el7fdp.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHEA-2018:1547"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RHV-S-4.2:openvswitch-0:2.9.0-19.el7fdp.src",
"7Server-RHV-S-4.2:openvswitch-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:python-openvswitch-0:2.9.0-19.el7fdp.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dpdk: Information exposure in unchecked guest physical to host virtual address translations"
}
]
}
rhsa-2018_1267
Vulnerability from csaf_redhat
Published
2018-04-30 10:00
Modified
2024-11-14 23:41
Summary
Red Hat Security Advisory: openvswitch security and bug fix update
Notes
Topic
An update for openvswitch is now available for Fast Datapath for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 24 July 2018]
This advisory has been updated to provide the openvswitch packages also for the IBM POWER, little endian architecture.
Details
Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic.
Security Fix(es):
* dpdk: Information exposure in unchecked guest physical to host virtual address translations (CVE-2018-1059)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
This issue was discovered by Maxime Coquelin (Red Hat).
Bug Fix(es):
* The openvswitch packages have been upgraded to upstream version 2.9.0, which provides a number of bug fixes and enhancements over the previous version. (BZ#1560628)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for openvswitch is now available for Fast Datapath for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 24 July 2018]\nThis advisory has been updated to provide the openvswitch packages also for the IBM POWER, little endian architecture.",
"title": "Topic"
},
{
"category": "general",
"text": "Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic.\n\nSecurity Fix(es):\n\n* dpdk: Information exposure in unchecked guest physical to host virtual address translations (CVE-2018-1059)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nThis issue was discovered by Maxime Coquelin (Red Hat).\n\nBug Fix(es):\n\n* The openvswitch packages have been upgraded to upstream version 2.9.0, which provides a number of bug fixes and enhancements over the previous version. (BZ#1560628)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:1267",
"url": "https://access.redhat.com/errata/RHSA-2018:1267"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1544298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"category": "external",
"summary": "1560628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1560628"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1267.json"
}
],
"title": "Red Hat Security Advisory: openvswitch security and bug fix update",
"tracking": {
"current_release_date": "2024-11-14T23:41:39+00:00",
"generator": {
"date": "2024-11-14T23:41:39+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2018:1267",
"initial_release_date": "2018-04-30T10:00:04+00:00",
"revision_history": [
{
"date": "2018-04-30T10:00:04+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-11-13T15:51:44+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T23:41:39+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Fast Datapath for Red Hat Enterprise Linux 7",
"product": {
"name": "Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
}
}
},
{
"category": "product_name",
"name": "Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product": {
"name": "Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::hypervisor"
}
}
}
],
"category": "product_family",
"name": "Fast Datapath"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"product": {
"name": "openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"product_id": "openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"product": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"product_id": "python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-19.el7fdp.src",
"product": {
"name": "openvswitch-0:2.9.0-19.el7fdp.src",
"product_id": "openvswitch-0:2.9.0-19.el7fdp.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.src as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-19.el7fdp.src"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.src",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-test-0:2.9.0-19.el7fdp.noarch as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.9.0-19.el7fdp.noarch"
},
"product_reference": "openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.noarch as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-19.el7fdp.noarch"
},
"product_reference": "python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.src as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-19.el7fdp.src"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.src",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-test-0:2.9.0-19.el7fdp.noarch as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-test-0:2.9.0-19.el7fdp.noarch"
},
"product_reference": "openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.noarch as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-19.el7fdp.noarch"
},
"product_reference": "python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Maxime Coquelin"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2018-1059",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2018-01-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1544298"
}
],
"notes": [
{
"category": "description",
"text": "The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dpdk: Information exposure in unchecked guest physical to host virtual address translations",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat OpenStack Platform versions 7 to 9 provided openvswitch-dpdk as a technical preview for customers, it was provided without support and is not intended on being deployed in production.\n\nRed Hat Ceph Storage version 3 provides ceph bundled with DPDK as a technical preview for customers. It was provided without support and is not intended on being deployed in production.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-19.el7fdp.src",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-19.el7fdp.src",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-19.el7fdp.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
},
{
"category": "external",
"summary": "RHBZ#1544298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1059",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2018-1059",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
}
],
"release_date": "2018-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-30T10:00:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-19.el7fdp.src",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-19.el7fdp.src",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-19.el7fdp.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-19.el7fdp.src",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-19.el7fdp.src",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-19.el7fdp.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dpdk: Information exposure in unchecked guest physical to host virtual address translations"
}
]
}
rhsa-2018:2102
Vulnerability from csaf_redhat
Published
2018-06-28 15:42
Modified
2024-11-14 23:43
Summary
Red Hat Security Advisory: Red Hat OpenStack Platform 10 Security, Bug Fix, and Enhancement Advisory
Notes
Topic
An update is now available for Red Hat OpenStack Platform 10.0 (Newton) for RHEL 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.
Security Fix(es):
* dpdk: Information exposure in unchecked guest physical to host virtual address translations (CVE-2018-1059)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
The CVE-2018-1059 issue was discovered by Maxime Coquelin (Red Hat).
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for Red Hat OpenStack Platform 10.0 (Newton) for RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenStack Platform provides the facilities for building, deploying\nand monitoring a private or public infrastructure-as-a-service (IaaS) cloud\nrunning on commonly available physical hardware.\n\nSecurity Fix(es):\n\n* dpdk: Information exposure in unchecked guest physical to host virtual address translations (CVE-2018-1059)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nThe CVE-2018-1059 issue was discovered by Maxime Coquelin (Red Hat).",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2102",
"url": "https://access.redhat.com/errata/RHSA-2018:2102"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1540017",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1540017"
},
{
"category": "external",
"summary": "1540158",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1540158"
},
{
"category": "external",
"summary": "1540164",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1540164"
},
{
"category": "external",
"summary": "1540175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1540175"
},
{
"category": "external",
"summary": "1542107",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1542107"
},
{
"category": "external",
"summary": "1544298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"category": "external",
"summary": "1546198",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1546198"
},
{
"category": "external",
"summary": "1549893",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1549893"
},
{
"category": "external",
"summary": "1550124",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550124"
},
{
"category": "external",
"summary": "1550398",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550398"
},
{
"category": "external",
"summary": "1551682",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1551682"
},
{
"category": "external",
"summary": "1553812",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1553812"
},
{
"category": "external",
"summary": "1556662",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1556662"
},
{
"category": "external",
"summary": "1561939",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1561939"
},
{
"category": "external",
"summary": "1572510",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1572510"
},
{
"category": "external",
"summary": "1579905",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1579905"
},
{
"category": "external",
"summary": "1583750",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1583750"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2102.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenStack Platform 10 Security, Bug Fix, and Enhancement Advisory",
"tracking": {
"current_release_date": "2024-11-14T23:43:20+00:00",
"generator": {
"date": "2024-11-14T23:43:20+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2018:2102",
"initial_release_date": "2018-06-28T15:42:37+00:00",
"revision_history": [
{
"date": "2018-06-28T15:42:37+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-06-28T15:42:37+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T23:43:20+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 10.0",
"product": {
"name": "Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:10::el7"
}
}
},
{
"category": "product_name",
"name": "OpenStack 10.0 Tools for RHEL 7",
"product": {
"name": "OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:10::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "openstack-selinux-0:0.8.14-5.el7ost.src",
"product": {
"name": "openstack-selinux-0:0.8.14-5.el7ost.src",
"product_id": "openstack-selinux-0:0.8.14-5.el7ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=src"
}
}
},
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"product": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"product_id": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "openstack-selinux-0:0.8.14-5.el7ost.noarch",
"product": {
"name": "openstack-selinux-0:0.8.14-5.el7ost.noarch",
"product_id": "openstack-selinux-0:0.8.14-5.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"product": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"product_id": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"product": {
"name": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"product_id": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-selinux-0:0.8.14-5.el7ost.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openstack-selinux-0:0.8.14-5.el7ost.noarch"
},
"product_reference": "openstack-selinux-0:0.8.14-5.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-selinux-0:0.8.14-5.el7ost.src as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openstack-selinux-0:0.8.14-5.el7ost.src"
},
"product_reference": "openstack-selinux-0:0.8.14-5.el7ost.src",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.src as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.src"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch"
},
"product_reference": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
},
"product_reference": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.src as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.src"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch"
},
"product_reference": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
},
"product_reference": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Maxime Coquelin"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2018-1059",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2018-01-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1544298"
}
],
"notes": [
{
"category": "description",
"text": "The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dpdk: Information exposure in unchecked guest physical to host virtual address translations",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat OpenStack Platform versions 7 to 9 provided openvswitch-dpdk as a technical preview for customers, it was provided without support and is not intended on being deployed in production.\n\nRed Hat Ceph Storage version 3 provides ceph bundled with DPDK as a technical preview for customers. It was provided without support and is not intended on being deployed in production.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-10.0:openstack-selinux-0:0.8.14-5.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-selinux-0:0.8.14-5.el7ost.src",
"7Server-RH7-RHOS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-10.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-10.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
},
{
"category": "external",
"summary": "RHBZ#1544298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1059",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2018-1059",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
}
],
"release_date": "2018-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-06-28T15:42:37+00:00",
"details": "Before applying this update, ensure all previously released errata relevant\nto your system have been applied.\n\nRed Hat OpenStack Platform 10 runs on Red Hat Enterprise Linux 7.4.\n\nThe Red Hat OpenStack Platform 10 Release Notes contain the following:\n* An explanation of the way in which the provided components interact to\nform a working cloud computing environment.\n* Technology Previews, Recommended Practices, and Known Issues.\n* The channels required for Red Hat OpenStack Platform 10, including which\nchannels need to be enabled and disabled.\n\nThe Release Notes are available at:\nhttps://access.redhat.com/documentation/en/red-hat-openstack-platform/10/paged/release-notes\n\nThis update is available through \u0027yum update\u0027 on systems registered through\nRed Hat Subscription Manager. For more information about Red Hat\nSubscription Manager, see:\n\nhttps://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html",
"product_ids": [
"7Server-RH7-RHOS-10.0:openstack-selinux-0:0.8.14-5.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-selinux-0:0.8.14-5.el7ost.src",
"7Server-RH7-RHOS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-10.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-10.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2102"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-10.0:openstack-selinux-0:0.8.14-5.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-selinux-0:0.8.14-5.el7ost.src",
"7Server-RH7-RHOS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-10.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-10.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dpdk: Information exposure in unchecked guest physical to host virtual address translations"
}
]
}
rhsa-2018:2038
Vulnerability from csaf_redhat
Published
2018-06-26 19:01
Modified
2024-11-14 23:43
Summary
Red Hat Security Advisory: dpdk security, bug fix and enhancement update
Notes
Topic
An update for DPDK is now available for Extras for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space.
Security Fix(es):
* dpdk: Information exposure in unchecked guest physical to host virtual address translations (CVE-2018-1059)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
This issue was discovered by Maxime Coquelin (Red Hat).
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for DPDK is now available for Extras for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space.\n\nSecurity Fix(es):\n\n* dpdk: Information exposure in unchecked guest physical to host virtual address translations (CVE-2018-1059)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nThis issue was discovered by Maxime Coquelin (Red Hat).",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2038",
"url": "https://access.redhat.com/errata/RHSA-2018:2038"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1544298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"category": "external",
"summary": "1573912",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1573912"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2038.json"
}
],
"title": "Red Hat Security Advisory: dpdk security, bug fix and enhancement update",
"tracking": {
"current_release_date": "2024-11-14T23:43:31+00:00",
"generator": {
"date": "2024-11-14T23:43:31+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2018:2038",
"initial_release_date": "2018-06-26T19:01:16+00:00",
"revision_history": [
{
"date": "2018-06-26T19:01:16+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-06-26T19:01:16+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T23:43:31+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 7 Extras",
"product": {
"name": "Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_other:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Extras"
},
{
"branches": [
{
"category": "product_version",
"name": "dpdk-0:17.11-11.el7.x86_64",
"product": {
"name": "dpdk-0:17.11-11.el7.x86_64",
"product_id": "dpdk-0:17.11-11.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dpdk-debuginfo-0:17.11-11.el7.x86_64",
"product": {
"name": "dpdk-debuginfo-0:17.11-11.el7.x86_64",
"product_id": "dpdk-debuginfo-0:17.11-11.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dpdk-tools-0:17.11-11.el7.x86_64",
"product": {
"name": "dpdk-tools-0:17.11-11.el7.x86_64",
"product_id": "dpdk-tools-0:17.11-11.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dpdk-devel-0:17.11-11.el7.x86_64",
"product": {
"name": "dpdk-devel-0:17.11-11.el7.x86_64",
"product_id": "dpdk-devel-0:17.11-11.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "dpdk-0:17.11-11.el7.src",
"product": {
"name": "dpdk-0:17.11-11.el7.src",
"product_id": "dpdk-0:17.11-11.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "dpdk-0:17.11-11.el7.ppc64le",
"product": {
"name": "dpdk-0:17.11-11.el7.ppc64le",
"product_id": "dpdk-0:17.11-11.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dpdk-debuginfo-0:17.11-11.el7.ppc64le",
"product": {
"name": "dpdk-debuginfo-0:17.11-11.el7.ppc64le",
"product_id": "dpdk-debuginfo-0:17.11-11.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dpdk-tools-0:17.11-11.el7.ppc64le",
"product": {
"name": "dpdk-tools-0:17.11-11.el7.ppc64le",
"product_id": "dpdk-tools-0:17.11-11.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dpdk-devel-0:17.11-11.el7.ppc64le",
"product": {
"name": "dpdk-devel-0:17.11-11.el7.ppc64le",
"product_id": "dpdk-devel-0:17.11-11.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "dpdk-doc-0:17.11-11.el7.noarch",
"product": {
"name": "dpdk-doc-0:17.11-11.el7.noarch",
"product_id": "dpdk-doc-0:17.11-11.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-0:17.11-11.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.ppc64le"
},
"product_reference": "dpdk-0:17.11-11.el7.ppc64le",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-0:17.11-11.el7.src as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.src"
},
"product_reference": "dpdk-0:17.11-11.el7.src",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-0:17.11-11.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.x86_64"
},
"product_reference": "dpdk-0:17.11-11.el7.x86_64",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-debuginfo-0:17.11-11.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-debuginfo-0:17.11-11.el7.ppc64le"
},
"product_reference": "dpdk-debuginfo-0:17.11-11.el7.ppc64le",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-debuginfo-0:17.11-11.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-debuginfo-0:17.11-11.el7.x86_64"
},
"product_reference": "dpdk-debuginfo-0:17.11-11.el7.x86_64",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-devel-0:17.11-11.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-devel-0:17.11-11.el7.ppc64le"
},
"product_reference": "dpdk-devel-0:17.11-11.el7.ppc64le",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-devel-0:17.11-11.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-devel-0:17.11-11.el7.x86_64"
},
"product_reference": "dpdk-devel-0:17.11-11.el7.x86_64",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-doc-0:17.11-11.el7.noarch as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-doc-0:17.11-11.el7.noarch"
},
"product_reference": "dpdk-doc-0:17.11-11.el7.noarch",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-tools-0:17.11-11.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-tools-0:17.11-11.el7.ppc64le"
},
"product_reference": "dpdk-tools-0:17.11-11.el7.ppc64le",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-tools-0:17.11-11.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-tools-0:17.11-11.el7.x86_64"
},
"product_reference": "dpdk-tools-0:17.11-11.el7.x86_64",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Maxime Coquelin"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2018-1059",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2018-01-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1544298"
}
],
"notes": [
{
"category": "description",
"text": "The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dpdk: Information exposure in unchecked guest physical to host virtual address translations",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat OpenStack Platform versions 7 to 9 provided openvswitch-dpdk as a technical preview for customers, it was provided without support and is not intended on being deployed in production.\n\nRed Hat Ceph Storage version 3 provides ceph bundled with DPDK as a technical preview for customers. It was provided without support and is not intended on being deployed in production.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.src",
"7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.x86_64",
"7Server-EXTRAS-7.5:dpdk-debuginfo-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-debuginfo-0:17.11-11.el7.x86_64",
"7Server-EXTRAS-7.5:dpdk-devel-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-devel-0:17.11-11.el7.x86_64",
"7Server-EXTRAS-7.5:dpdk-doc-0:17.11-11.el7.noarch",
"7Server-EXTRAS-7.5:dpdk-tools-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-tools-0:17.11-11.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
},
{
"category": "external",
"summary": "RHBZ#1544298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1059",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2018-1059",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
}
],
"release_date": "2018-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-06-26T19:01:16+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.src",
"7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.x86_64",
"7Server-EXTRAS-7.5:dpdk-debuginfo-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-debuginfo-0:17.11-11.el7.x86_64",
"7Server-EXTRAS-7.5:dpdk-devel-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-devel-0:17.11-11.el7.x86_64",
"7Server-EXTRAS-7.5:dpdk-doc-0:17.11-11.el7.noarch",
"7Server-EXTRAS-7.5:dpdk-tools-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-tools-0:17.11-11.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2038"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.src",
"7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.x86_64",
"7Server-EXTRAS-7.5:dpdk-debuginfo-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-debuginfo-0:17.11-11.el7.x86_64",
"7Server-EXTRAS-7.5:dpdk-devel-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-devel-0:17.11-11.el7.x86_64",
"7Server-EXTRAS-7.5:dpdk-doc-0:17.11-11.el7.noarch",
"7Server-EXTRAS-7.5:dpdk-tools-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-tools-0:17.11-11.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dpdk: Information exposure in unchecked guest physical to host virtual address translations"
}
]
}
RHSA-2018:2038
Vulnerability from csaf_redhat
Published
2018-06-26 19:01
Modified
2024-11-14 23:43
Summary
Red Hat Security Advisory: dpdk security, bug fix and enhancement update
Notes
Topic
An update for DPDK is now available for Extras for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space.
Security Fix(es):
* dpdk: Information exposure in unchecked guest physical to host virtual address translations (CVE-2018-1059)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
This issue was discovered by Maxime Coquelin (Red Hat).
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for DPDK is now available for Extras for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space.\n\nSecurity Fix(es):\n\n* dpdk: Information exposure in unchecked guest physical to host virtual address translations (CVE-2018-1059)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nThis issue was discovered by Maxime Coquelin (Red Hat).",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2038",
"url": "https://access.redhat.com/errata/RHSA-2018:2038"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1544298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"category": "external",
"summary": "1573912",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1573912"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2038.json"
}
],
"title": "Red Hat Security Advisory: dpdk security, bug fix and enhancement update",
"tracking": {
"current_release_date": "2024-11-14T23:43:31+00:00",
"generator": {
"date": "2024-11-14T23:43:31+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2018:2038",
"initial_release_date": "2018-06-26T19:01:16+00:00",
"revision_history": [
{
"date": "2018-06-26T19:01:16+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-06-26T19:01:16+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T23:43:31+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 7 Extras",
"product": {
"name": "Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_other:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Extras"
},
{
"branches": [
{
"category": "product_version",
"name": "dpdk-0:17.11-11.el7.x86_64",
"product": {
"name": "dpdk-0:17.11-11.el7.x86_64",
"product_id": "dpdk-0:17.11-11.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dpdk-debuginfo-0:17.11-11.el7.x86_64",
"product": {
"name": "dpdk-debuginfo-0:17.11-11.el7.x86_64",
"product_id": "dpdk-debuginfo-0:17.11-11.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dpdk-tools-0:17.11-11.el7.x86_64",
"product": {
"name": "dpdk-tools-0:17.11-11.el7.x86_64",
"product_id": "dpdk-tools-0:17.11-11.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dpdk-devel-0:17.11-11.el7.x86_64",
"product": {
"name": "dpdk-devel-0:17.11-11.el7.x86_64",
"product_id": "dpdk-devel-0:17.11-11.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "dpdk-0:17.11-11.el7.src",
"product": {
"name": "dpdk-0:17.11-11.el7.src",
"product_id": "dpdk-0:17.11-11.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "dpdk-0:17.11-11.el7.ppc64le",
"product": {
"name": "dpdk-0:17.11-11.el7.ppc64le",
"product_id": "dpdk-0:17.11-11.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dpdk-debuginfo-0:17.11-11.el7.ppc64le",
"product": {
"name": "dpdk-debuginfo-0:17.11-11.el7.ppc64le",
"product_id": "dpdk-debuginfo-0:17.11-11.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dpdk-tools-0:17.11-11.el7.ppc64le",
"product": {
"name": "dpdk-tools-0:17.11-11.el7.ppc64le",
"product_id": "dpdk-tools-0:17.11-11.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dpdk-devel-0:17.11-11.el7.ppc64le",
"product": {
"name": "dpdk-devel-0:17.11-11.el7.ppc64le",
"product_id": "dpdk-devel-0:17.11-11.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "dpdk-doc-0:17.11-11.el7.noarch",
"product": {
"name": "dpdk-doc-0:17.11-11.el7.noarch",
"product_id": "dpdk-doc-0:17.11-11.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-0:17.11-11.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.ppc64le"
},
"product_reference": "dpdk-0:17.11-11.el7.ppc64le",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-0:17.11-11.el7.src as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.src"
},
"product_reference": "dpdk-0:17.11-11.el7.src",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-0:17.11-11.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.x86_64"
},
"product_reference": "dpdk-0:17.11-11.el7.x86_64",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-debuginfo-0:17.11-11.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-debuginfo-0:17.11-11.el7.ppc64le"
},
"product_reference": "dpdk-debuginfo-0:17.11-11.el7.ppc64le",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-debuginfo-0:17.11-11.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-debuginfo-0:17.11-11.el7.x86_64"
},
"product_reference": "dpdk-debuginfo-0:17.11-11.el7.x86_64",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-devel-0:17.11-11.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-devel-0:17.11-11.el7.ppc64le"
},
"product_reference": "dpdk-devel-0:17.11-11.el7.ppc64le",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-devel-0:17.11-11.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-devel-0:17.11-11.el7.x86_64"
},
"product_reference": "dpdk-devel-0:17.11-11.el7.x86_64",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-doc-0:17.11-11.el7.noarch as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-doc-0:17.11-11.el7.noarch"
},
"product_reference": "dpdk-doc-0:17.11-11.el7.noarch",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-tools-0:17.11-11.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-tools-0:17.11-11.el7.ppc64le"
},
"product_reference": "dpdk-tools-0:17.11-11.el7.ppc64le",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-tools-0:17.11-11.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-tools-0:17.11-11.el7.x86_64"
},
"product_reference": "dpdk-tools-0:17.11-11.el7.x86_64",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Maxime Coquelin"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2018-1059",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2018-01-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1544298"
}
],
"notes": [
{
"category": "description",
"text": "The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dpdk: Information exposure in unchecked guest physical to host virtual address translations",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat OpenStack Platform versions 7 to 9 provided openvswitch-dpdk as a technical preview for customers, it was provided without support and is not intended on being deployed in production.\n\nRed Hat Ceph Storage version 3 provides ceph bundled with DPDK as a technical preview for customers. It was provided without support and is not intended on being deployed in production.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.src",
"7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.x86_64",
"7Server-EXTRAS-7.5:dpdk-debuginfo-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-debuginfo-0:17.11-11.el7.x86_64",
"7Server-EXTRAS-7.5:dpdk-devel-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-devel-0:17.11-11.el7.x86_64",
"7Server-EXTRAS-7.5:dpdk-doc-0:17.11-11.el7.noarch",
"7Server-EXTRAS-7.5:dpdk-tools-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-tools-0:17.11-11.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
},
{
"category": "external",
"summary": "RHBZ#1544298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1059",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2018-1059",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
}
],
"release_date": "2018-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-06-26T19:01:16+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.src",
"7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.x86_64",
"7Server-EXTRAS-7.5:dpdk-debuginfo-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-debuginfo-0:17.11-11.el7.x86_64",
"7Server-EXTRAS-7.5:dpdk-devel-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-devel-0:17.11-11.el7.x86_64",
"7Server-EXTRAS-7.5:dpdk-doc-0:17.11-11.el7.noarch",
"7Server-EXTRAS-7.5:dpdk-tools-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-tools-0:17.11-11.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2038"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.src",
"7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.x86_64",
"7Server-EXTRAS-7.5:dpdk-debuginfo-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-debuginfo-0:17.11-11.el7.x86_64",
"7Server-EXTRAS-7.5:dpdk-devel-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-devel-0:17.11-11.el7.x86_64",
"7Server-EXTRAS-7.5:dpdk-doc-0:17.11-11.el7.noarch",
"7Server-EXTRAS-7.5:dpdk-tools-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-tools-0:17.11-11.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dpdk: Information exposure in unchecked guest physical to host virtual address translations"
}
]
}
rhea-2018_1547
Vulnerability from csaf_redhat
Published
2018-05-15 17:46
Modified
2024-11-14 23:33
Summary
Red Hat Enhancement Advisory: openvswitch bug fix and enhancement update
Notes
Topic
Updated openvswitch packages that fix several bugs and add various enhancements are now available.
Details
The openvswitch package contains components for enabling Open vSwitch, a software-based Ethernet virtual switch. It also includes OVN (Open Virtual Network) components for supporting virtual network abstraction.
Consume openvswitch in RHEL 7 RHV 4.2
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated openvswitch packages that fix several bugs and add various enhancements are now available.",
"title": "Topic"
},
{
"category": "general",
"text": "The openvswitch package contains components for enabling Open vSwitch, a software-based Ethernet virtual switch. It also includes OVN (Open Virtual Network) components for supporting virtual network abstraction.\n\nConsume openvswitch in RHEL 7 RHV 4.2",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHEA-2018:1547",
"url": "https://access.redhat.com/errata/RHEA-2018:1547"
},
{
"category": "external",
"summary": "1502612",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502612"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhea-2018_1547.json"
}
],
"title": "Red Hat Enhancement Advisory: openvswitch bug fix and enhancement update",
"tracking": {
"current_release_date": "2024-11-14T23:33:11+00:00",
"generator": {
"date": "2024-11-14T23:33:11+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHEA-2018:1547",
"initial_release_date": "2018-05-15T17:46:30+00:00",
"revision_history": [
{
"date": "2018-05-15T17:46:30+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-05-15T17:46:30+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T23:33:11+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHV-M 4.2",
"product": {
"name": "RHV-M 4.2",
"product_id": "7Server-RHV-S-4.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhev_manager:4.2"
}
}
}
],
"category": "product_family",
"name": "Red Hat Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-19.el7fdp.src",
"product": {
"name": "openvswitch-0:2.9.0-19.el7fdp.src",
"product_id": "openvswitch-0:2.9.0-19.el7fdp.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"product": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"product_id": "python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.src as a component of RHV-M 4.2",
"product_id": "7Server-RHV-S-4.2:openvswitch-0:2.9.0-19.el7fdp.src"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.src",
"relates_to_product_reference": "7Server-RHV-S-4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.x86_64 as a component of RHV-M 4.2",
"product_id": "7Server-RHV-S-4.2:openvswitch-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RHV-S-4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64 as a component of RHV-M 4.2",
"product_id": "7Server-RHV-S-4.2:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RHV-S-4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64 as a component of RHV-M 4.2",
"product_id": "7Server-RHV-S-4.2:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RHV-S-4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64 as a component of RHV-M 4.2",
"product_id": "7Server-RHV-S-4.2:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RHV-S-4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64 as a component of RHV-M 4.2",
"product_id": "7Server-RHV-S-4.2:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RHV-S-4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64 as a component of RHV-M 4.2",
"product_id": "7Server-RHV-S-4.2:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RHV-S-4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.noarch as a component of RHV-M 4.2",
"product_id": "7Server-RHV-S-4.2:python-openvswitch-0:2.9.0-19.el7fdp.noarch"
},
"product_reference": "python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"relates_to_product_reference": "7Server-RHV-S-4.2"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Maxime Coquelin"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2018-1059",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2018-01-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1544298"
}
],
"notes": [
{
"category": "description",
"text": "The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dpdk: Information exposure in unchecked guest physical to host virtual address translations",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat OpenStack Platform versions 7 to 9 provided openvswitch-dpdk as a technical preview for customers, it was provided without support and is not intended on being deployed in production.\n\nRed Hat Ceph Storage version 3 provides ceph bundled with DPDK as a technical preview for customers. It was provided without support and is not intended on being deployed in production.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHV-S-4.2:openvswitch-0:2.9.0-19.el7fdp.src",
"7Server-RHV-S-4.2:openvswitch-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:python-openvswitch-0:2.9.0-19.el7fdp.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
},
{
"category": "external",
"summary": "RHBZ#1544298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1059",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2018-1059",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
}
],
"release_date": "2018-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-15T17:46:30+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/2974891",
"product_ids": [
"7Server-RHV-S-4.2:openvswitch-0:2.9.0-19.el7fdp.src",
"7Server-RHV-S-4.2:openvswitch-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:python-openvswitch-0:2.9.0-19.el7fdp.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHEA-2018:1547"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RHV-S-4.2:openvswitch-0:2.9.0-19.el7fdp.src",
"7Server-RHV-S-4.2:openvswitch-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"7Server-RHV-S-4.2:python-openvswitch-0:2.9.0-19.el7fdp.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dpdk: Information exposure in unchecked guest physical to host virtual address translations"
}
]
}
RHSA-2018:2524
Vulnerability from csaf_redhat
Published
2018-08-20 13:01
Modified
2024-11-14 23:44
Summary
Red Hat Security Advisory: openvswitch security and bug fix update
Notes
Topic
An update for openvswitch is now available for Red Hat OpenStack Platform 12.0 (Pike).
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic.
Security Fix(es):
* dpdk: Information exposure in unchecked guest physical to host virtual address translations (CVE-2018-1059)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
This issue was discovered by Maxime Coquelin (Red Hat).
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for openvswitch is now available for Red Hat OpenStack Platform 12.0 (Pike).\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic.\n\nSecurity Fix(es):\n\n* dpdk: Information exposure in unchecked guest physical to host virtual address translations (CVE-2018-1059)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nThis issue was discovered by Maxime Coquelin (Red Hat).",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2524",
"url": "https://access.redhat.com/errata/RHSA-2018:2524"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1544298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"category": "external",
"summary": "1547518",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1547518"
},
{
"category": "external",
"summary": "1561969",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1561969"
},
{
"category": "external",
"summary": "1583749",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1583749"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2524.json"
}
],
"title": "Red Hat Security Advisory: openvswitch security and bug fix update",
"tracking": {
"current_release_date": "2024-11-14T23:44:57+00:00",
"generator": {
"date": "2024-11-14T23:44:57+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2018:2524",
"initial_release_date": "2018-08-20T13:01:03+00:00",
"revision_history": [
{
"date": "2018-08-20T13:01:03+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-08-20T13:01:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T23:44:57+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 12.0",
"product": {
"name": "Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:12::el7"
}
}
},
{
"category": "product_name",
"name": "OpenStack 12.0 Tools for RHEL 7",
"product": {
"name": "OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:12::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"product": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"product_id": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"product": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"product_id": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"product": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"product_id": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"product": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"product_id": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"product": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"product_id": "openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"product": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"product_id": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"product": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"product_id": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"product": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"product_id": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"product": {
"name": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"product_id": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.src as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.src"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch"
},
"product_reference": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
},
"product_reference": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.ppc64le as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.src as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.src"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch"
},
"product_reference": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
},
"product_reference": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Maxime Coquelin"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2018-1059",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2018-01-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1544298"
}
],
"notes": [
{
"category": "description",
"text": "The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dpdk: Information exposure in unchecked guest physical to host virtual address translations",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat OpenStack Platform versions 7 to 9 provided openvswitch-dpdk as a technical preview for customers, it was provided without support and is not intended on being deployed in production.\n\nRed Hat Ceph Storage version 3 provides ceph bundled with DPDK as a technical preview for customers. It was provided without support and is not intended on being deployed in production.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-12.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-12.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
},
{
"category": "external",
"summary": "RHBZ#1544298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1059",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2018-1059",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
}
],
"release_date": "2018-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-20T13:01:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-12.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-12.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2524"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-12.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-12.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dpdk: Information exposure in unchecked guest physical to host virtual address translations"
}
]
}
rhsa-2018_2102
Vulnerability from csaf_redhat
Published
2018-06-28 15:42
Modified
2024-11-14 23:43
Summary
Red Hat Security Advisory: Red Hat OpenStack Platform 10 Security, Bug Fix, and Enhancement Advisory
Notes
Topic
An update is now available for Red Hat OpenStack Platform 10.0 (Newton) for RHEL 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.
Security Fix(es):
* dpdk: Information exposure in unchecked guest physical to host virtual address translations (CVE-2018-1059)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
The CVE-2018-1059 issue was discovered by Maxime Coquelin (Red Hat).
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for Red Hat OpenStack Platform 10.0 (Newton) for RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenStack Platform provides the facilities for building, deploying\nand monitoring a private or public infrastructure-as-a-service (IaaS) cloud\nrunning on commonly available physical hardware.\n\nSecurity Fix(es):\n\n* dpdk: Information exposure in unchecked guest physical to host virtual address translations (CVE-2018-1059)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nThe CVE-2018-1059 issue was discovered by Maxime Coquelin (Red Hat).",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2102",
"url": "https://access.redhat.com/errata/RHSA-2018:2102"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1540017",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1540017"
},
{
"category": "external",
"summary": "1540158",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1540158"
},
{
"category": "external",
"summary": "1540164",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1540164"
},
{
"category": "external",
"summary": "1540175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1540175"
},
{
"category": "external",
"summary": "1542107",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1542107"
},
{
"category": "external",
"summary": "1544298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"category": "external",
"summary": "1546198",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1546198"
},
{
"category": "external",
"summary": "1549893",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1549893"
},
{
"category": "external",
"summary": "1550124",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550124"
},
{
"category": "external",
"summary": "1550398",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550398"
},
{
"category": "external",
"summary": "1551682",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1551682"
},
{
"category": "external",
"summary": "1553812",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1553812"
},
{
"category": "external",
"summary": "1556662",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1556662"
},
{
"category": "external",
"summary": "1561939",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1561939"
},
{
"category": "external",
"summary": "1572510",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1572510"
},
{
"category": "external",
"summary": "1579905",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1579905"
},
{
"category": "external",
"summary": "1583750",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1583750"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2102.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenStack Platform 10 Security, Bug Fix, and Enhancement Advisory",
"tracking": {
"current_release_date": "2024-11-14T23:43:20+00:00",
"generator": {
"date": "2024-11-14T23:43:20+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2018:2102",
"initial_release_date": "2018-06-28T15:42:37+00:00",
"revision_history": [
{
"date": "2018-06-28T15:42:37+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-06-28T15:42:37+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T23:43:20+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 10.0",
"product": {
"name": "Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:10::el7"
}
}
},
{
"category": "product_name",
"name": "OpenStack 10.0 Tools for RHEL 7",
"product": {
"name": "OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:10::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "openstack-selinux-0:0.8.14-5.el7ost.src",
"product": {
"name": "openstack-selinux-0:0.8.14-5.el7ost.src",
"product_id": "openstack-selinux-0:0.8.14-5.el7ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=src"
}
}
},
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"product": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"product_id": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "openstack-selinux-0:0.8.14-5.el7ost.noarch",
"product": {
"name": "openstack-selinux-0:0.8.14-5.el7ost.noarch",
"product_id": "openstack-selinux-0:0.8.14-5.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"product": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"product_id": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"product": {
"name": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"product_id": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-selinux-0:0.8.14-5.el7ost.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openstack-selinux-0:0.8.14-5.el7ost.noarch"
},
"product_reference": "openstack-selinux-0:0.8.14-5.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-selinux-0:0.8.14-5.el7ost.src as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openstack-selinux-0:0.8.14-5.el7ost.src"
},
"product_reference": "openstack-selinux-0:0.8.14-5.el7ost.src",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.src as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.src"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch"
},
"product_reference": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
},
"product_reference": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.src as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.src"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch"
},
"product_reference": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
},
"product_reference": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Maxime Coquelin"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2018-1059",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2018-01-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1544298"
}
],
"notes": [
{
"category": "description",
"text": "The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dpdk: Information exposure in unchecked guest physical to host virtual address translations",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat OpenStack Platform versions 7 to 9 provided openvswitch-dpdk as a technical preview for customers, it was provided without support and is not intended on being deployed in production.\n\nRed Hat Ceph Storage version 3 provides ceph bundled with DPDK as a technical preview for customers. It was provided without support and is not intended on being deployed in production.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-10.0:openstack-selinux-0:0.8.14-5.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-selinux-0:0.8.14-5.el7ost.src",
"7Server-RH7-RHOS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-10.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-10.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
},
{
"category": "external",
"summary": "RHBZ#1544298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1059",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2018-1059",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
}
],
"release_date": "2018-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-06-28T15:42:37+00:00",
"details": "Before applying this update, ensure all previously released errata relevant\nto your system have been applied.\n\nRed Hat OpenStack Platform 10 runs on Red Hat Enterprise Linux 7.4.\n\nThe Red Hat OpenStack Platform 10 Release Notes contain the following:\n* An explanation of the way in which the provided components interact to\nform a working cloud computing environment.\n* Technology Previews, Recommended Practices, and Known Issues.\n* The channels required for Red Hat OpenStack Platform 10, including which\nchannels need to be enabled and disabled.\n\nThe Release Notes are available at:\nhttps://access.redhat.com/documentation/en/red-hat-openstack-platform/10/paged/release-notes\n\nThis update is available through \u0027yum update\u0027 on systems registered through\nRed Hat Subscription Manager. For more information about Red Hat\nSubscription Manager, see:\n\nhttps://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html",
"product_ids": [
"7Server-RH7-RHOS-10.0:openstack-selinux-0:0.8.14-5.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-selinux-0:0.8.14-5.el7ost.src",
"7Server-RH7-RHOS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-10.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-10.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2102"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-10.0:openstack-selinux-0:0.8.14-5.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-selinux-0:0.8.14-5.el7ost.src",
"7Server-RH7-RHOS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-10.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-10.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dpdk: Information exposure in unchecked guest physical to host virtual address translations"
}
]
}
rhsa-2018_2038
Vulnerability from csaf_redhat
Published
2018-06-26 19:01
Modified
2024-11-14 23:43
Summary
Red Hat Security Advisory: dpdk security, bug fix and enhancement update
Notes
Topic
An update for DPDK is now available for Extras for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space.
Security Fix(es):
* dpdk: Information exposure in unchecked guest physical to host virtual address translations (CVE-2018-1059)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
This issue was discovered by Maxime Coquelin (Red Hat).
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for DPDK is now available for Extras for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space.\n\nSecurity Fix(es):\n\n* dpdk: Information exposure in unchecked guest physical to host virtual address translations (CVE-2018-1059)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nThis issue was discovered by Maxime Coquelin (Red Hat).",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2038",
"url": "https://access.redhat.com/errata/RHSA-2018:2038"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1544298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"category": "external",
"summary": "1573912",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1573912"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2038.json"
}
],
"title": "Red Hat Security Advisory: dpdk security, bug fix and enhancement update",
"tracking": {
"current_release_date": "2024-11-14T23:43:31+00:00",
"generator": {
"date": "2024-11-14T23:43:31+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2018:2038",
"initial_release_date": "2018-06-26T19:01:16+00:00",
"revision_history": [
{
"date": "2018-06-26T19:01:16+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-06-26T19:01:16+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T23:43:31+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 7 Extras",
"product": {
"name": "Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_other:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Extras"
},
{
"branches": [
{
"category": "product_version",
"name": "dpdk-0:17.11-11.el7.x86_64",
"product": {
"name": "dpdk-0:17.11-11.el7.x86_64",
"product_id": "dpdk-0:17.11-11.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dpdk-debuginfo-0:17.11-11.el7.x86_64",
"product": {
"name": "dpdk-debuginfo-0:17.11-11.el7.x86_64",
"product_id": "dpdk-debuginfo-0:17.11-11.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dpdk-tools-0:17.11-11.el7.x86_64",
"product": {
"name": "dpdk-tools-0:17.11-11.el7.x86_64",
"product_id": "dpdk-tools-0:17.11-11.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dpdk-devel-0:17.11-11.el7.x86_64",
"product": {
"name": "dpdk-devel-0:17.11-11.el7.x86_64",
"product_id": "dpdk-devel-0:17.11-11.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "dpdk-0:17.11-11.el7.src",
"product": {
"name": "dpdk-0:17.11-11.el7.src",
"product_id": "dpdk-0:17.11-11.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "dpdk-0:17.11-11.el7.ppc64le",
"product": {
"name": "dpdk-0:17.11-11.el7.ppc64le",
"product_id": "dpdk-0:17.11-11.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dpdk-debuginfo-0:17.11-11.el7.ppc64le",
"product": {
"name": "dpdk-debuginfo-0:17.11-11.el7.ppc64le",
"product_id": "dpdk-debuginfo-0:17.11-11.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dpdk-tools-0:17.11-11.el7.ppc64le",
"product": {
"name": "dpdk-tools-0:17.11-11.el7.ppc64le",
"product_id": "dpdk-tools-0:17.11-11.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dpdk-devel-0:17.11-11.el7.ppc64le",
"product": {
"name": "dpdk-devel-0:17.11-11.el7.ppc64le",
"product_id": "dpdk-devel-0:17.11-11.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "dpdk-doc-0:17.11-11.el7.noarch",
"product": {
"name": "dpdk-doc-0:17.11-11.el7.noarch",
"product_id": "dpdk-doc-0:17.11-11.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-0:17.11-11.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.ppc64le"
},
"product_reference": "dpdk-0:17.11-11.el7.ppc64le",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-0:17.11-11.el7.src as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.src"
},
"product_reference": "dpdk-0:17.11-11.el7.src",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-0:17.11-11.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.x86_64"
},
"product_reference": "dpdk-0:17.11-11.el7.x86_64",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-debuginfo-0:17.11-11.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-debuginfo-0:17.11-11.el7.ppc64le"
},
"product_reference": "dpdk-debuginfo-0:17.11-11.el7.ppc64le",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-debuginfo-0:17.11-11.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-debuginfo-0:17.11-11.el7.x86_64"
},
"product_reference": "dpdk-debuginfo-0:17.11-11.el7.x86_64",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-devel-0:17.11-11.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-devel-0:17.11-11.el7.ppc64le"
},
"product_reference": "dpdk-devel-0:17.11-11.el7.ppc64le",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-devel-0:17.11-11.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-devel-0:17.11-11.el7.x86_64"
},
"product_reference": "dpdk-devel-0:17.11-11.el7.x86_64",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-doc-0:17.11-11.el7.noarch as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-doc-0:17.11-11.el7.noarch"
},
"product_reference": "dpdk-doc-0:17.11-11.el7.noarch",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-tools-0:17.11-11.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-tools-0:17.11-11.el7.ppc64le"
},
"product_reference": "dpdk-tools-0:17.11-11.el7.ppc64le",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-tools-0:17.11-11.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras",
"product_id": "7Server-EXTRAS-7.5:dpdk-tools-0:17.11-11.el7.x86_64"
},
"product_reference": "dpdk-tools-0:17.11-11.el7.x86_64",
"relates_to_product_reference": "7Server-EXTRAS-7.5"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Maxime Coquelin"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2018-1059",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2018-01-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1544298"
}
],
"notes": [
{
"category": "description",
"text": "The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dpdk: Information exposure in unchecked guest physical to host virtual address translations",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat OpenStack Platform versions 7 to 9 provided openvswitch-dpdk as a technical preview for customers, it was provided without support and is not intended on being deployed in production.\n\nRed Hat Ceph Storage version 3 provides ceph bundled with DPDK as a technical preview for customers. It was provided without support and is not intended on being deployed in production.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.src",
"7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.x86_64",
"7Server-EXTRAS-7.5:dpdk-debuginfo-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-debuginfo-0:17.11-11.el7.x86_64",
"7Server-EXTRAS-7.5:dpdk-devel-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-devel-0:17.11-11.el7.x86_64",
"7Server-EXTRAS-7.5:dpdk-doc-0:17.11-11.el7.noarch",
"7Server-EXTRAS-7.5:dpdk-tools-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-tools-0:17.11-11.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
},
{
"category": "external",
"summary": "RHBZ#1544298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1059",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2018-1059",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
}
],
"release_date": "2018-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-06-26T19:01:16+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.src",
"7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.x86_64",
"7Server-EXTRAS-7.5:dpdk-debuginfo-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-debuginfo-0:17.11-11.el7.x86_64",
"7Server-EXTRAS-7.5:dpdk-devel-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-devel-0:17.11-11.el7.x86_64",
"7Server-EXTRAS-7.5:dpdk-doc-0:17.11-11.el7.noarch",
"7Server-EXTRAS-7.5:dpdk-tools-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-tools-0:17.11-11.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2038"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.src",
"7Server-EXTRAS-7.5:dpdk-0:17.11-11.el7.x86_64",
"7Server-EXTRAS-7.5:dpdk-debuginfo-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-debuginfo-0:17.11-11.el7.x86_64",
"7Server-EXTRAS-7.5:dpdk-devel-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-devel-0:17.11-11.el7.x86_64",
"7Server-EXTRAS-7.5:dpdk-doc-0:17.11-11.el7.noarch",
"7Server-EXTRAS-7.5:dpdk-tools-0:17.11-11.el7.ppc64le",
"7Server-EXTRAS-7.5:dpdk-tools-0:17.11-11.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dpdk: Information exposure in unchecked guest physical to host virtual address translations"
}
]
}
rhsa-2018:2524
Vulnerability from csaf_redhat
Published
2018-08-20 13:01
Modified
2024-11-14 23:44
Summary
Red Hat Security Advisory: openvswitch security and bug fix update
Notes
Topic
An update for openvswitch is now available for Red Hat OpenStack Platform 12.0 (Pike).
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic.
Security Fix(es):
* dpdk: Information exposure in unchecked guest physical to host virtual address translations (CVE-2018-1059)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
This issue was discovered by Maxime Coquelin (Red Hat).
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for openvswitch is now available for Red Hat OpenStack Platform 12.0 (Pike).\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic.\n\nSecurity Fix(es):\n\n* dpdk: Information exposure in unchecked guest physical to host virtual address translations (CVE-2018-1059)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nThis issue was discovered by Maxime Coquelin (Red Hat).",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2524",
"url": "https://access.redhat.com/errata/RHSA-2018:2524"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1544298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"category": "external",
"summary": "1547518",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1547518"
},
{
"category": "external",
"summary": "1561969",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1561969"
},
{
"category": "external",
"summary": "1583749",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1583749"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2524.json"
}
],
"title": "Red Hat Security Advisory: openvswitch security and bug fix update",
"tracking": {
"current_release_date": "2024-11-14T23:44:57+00:00",
"generator": {
"date": "2024-11-14T23:44:57+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2018:2524",
"initial_release_date": "2018-08-20T13:01:03+00:00",
"revision_history": [
{
"date": "2018-08-20T13:01:03+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-08-20T13:01:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T23:44:57+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 12.0",
"product": {
"name": "Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:12::el7"
}
}
},
{
"category": "product_name",
"name": "OpenStack 12.0 Tools for RHEL 7",
"product": {
"name": "OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:12::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"product": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"product_id": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"product": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"product_id": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"product": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"product_id": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"product": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"product_id": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"product": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"product_id": "openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"product": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"product_id": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"product": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"product_id": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"product": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"product_id": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"product": {
"name": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"product_id": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.src as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.src"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch"
},
"product_reference": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
},
"product_reference": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.ppc64le as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.src as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.src"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le"
},
"product_reference": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch"
},
"product_reference": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch as a component of OpenStack 12.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-12.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
},
"product_reference": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-12.0"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Maxime Coquelin"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2018-1059",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2018-01-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1544298"
}
],
"notes": [
{
"category": "description",
"text": "The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dpdk: Information exposure in unchecked guest physical to host virtual address translations",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat OpenStack Platform versions 7 to 9 provided openvswitch-dpdk as a technical preview for customers, it was provided without support and is not intended on being deployed in production.\n\nRed Hat Ceph Storage version 3 provides ceph bundled with DPDK as a technical preview for customers. It was provided without support and is not intended on being deployed in production.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-12.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-12.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
},
{
"category": "external",
"summary": "RHBZ#1544298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1059",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2018-1059",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
}
],
"release_date": "2018-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-20T13:01:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-12.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-12.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2524"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-12.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-12.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.ppc64le",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-12.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-12.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dpdk: Information exposure in unchecked guest physical to host virtual address translations"
}
]
}
RHSA-2018:2102
Vulnerability from csaf_redhat
Published
2018-06-28 15:42
Modified
2024-11-14 23:43
Summary
Red Hat Security Advisory: Red Hat OpenStack Platform 10 Security, Bug Fix, and Enhancement Advisory
Notes
Topic
An update is now available for Red Hat OpenStack Platform 10.0 (Newton) for RHEL 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.
Security Fix(es):
* dpdk: Information exposure in unchecked guest physical to host virtual address translations (CVE-2018-1059)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
The CVE-2018-1059 issue was discovered by Maxime Coquelin (Red Hat).
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for Red Hat OpenStack Platform 10.0 (Newton) for RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenStack Platform provides the facilities for building, deploying\nand monitoring a private or public infrastructure-as-a-service (IaaS) cloud\nrunning on commonly available physical hardware.\n\nSecurity Fix(es):\n\n* dpdk: Information exposure in unchecked guest physical to host virtual address translations (CVE-2018-1059)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nThe CVE-2018-1059 issue was discovered by Maxime Coquelin (Red Hat).",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2102",
"url": "https://access.redhat.com/errata/RHSA-2018:2102"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1540017",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1540017"
},
{
"category": "external",
"summary": "1540158",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1540158"
},
{
"category": "external",
"summary": "1540164",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1540164"
},
{
"category": "external",
"summary": "1540175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1540175"
},
{
"category": "external",
"summary": "1542107",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1542107"
},
{
"category": "external",
"summary": "1544298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"category": "external",
"summary": "1546198",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1546198"
},
{
"category": "external",
"summary": "1549893",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1549893"
},
{
"category": "external",
"summary": "1550124",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550124"
},
{
"category": "external",
"summary": "1550398",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550398"
},
{
"category": "external",
"summary": "1551682",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1551682"
},
{
"category": "external",
"summary": "1553812",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1553812"
},
{
"category": "external",
"summary": "1556662",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1556662"
},
{
"category": "external",
"summary": "1561939",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1561939"
},
{
"category": "external",
"summary": "1572510",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1572510"
},
{
"category": "external",
"summary": "1579905",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1579905"
},
{
"category": "external",
"summary": "1583750",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1583750"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2102.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenStack Platform 10 Security, Bug Fix, and Enhancement Advisory",
"tracking": {
"current_release_date": "2024-11-14T23:43:20+00:00",
"generator": {
"date": "2024-11-14T23:43:20+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2018:2102",
"initial_release_date": "2018-06-28T15:42:37+00:00",
"revision_history": [
{
"date": "2018-06-28T15:42:37+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-06-28T15:42:37+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T23:43:20+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 10.0",
"product": {
"name": "Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:10::el7"
}
}
},
{
"category": "product_name",
"name": "OpenStack 10.0 Tools for RHEL 7",
"product": {
"name": "OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:10::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "openstack-selinux-0:0.8.14-5.el7ost.src",
"product": {
"name": "openstack-selinux-0:0.8.14-5.el7ost.src",
"product_id": "openstack-selinux-0:0.8.14-5.el7ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=src"
}
}
},
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"product": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"product_id": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "openstack-selinux-0:0.8.14-5.el7ost.noarch",
"product": {
"name": "openstack-selinux-0:0.8.14-5.el7ost.noarch",
"product_id": "openstack-selinux-0:0.8.14-5.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"product": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"product_id": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"product": {
"name": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"product_id": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"product": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"product_id": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-selinux-0:0.8.14-5.el7ost.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openstack-selinux-0:0.8.14-5.el7ost.noarch"
},
"product_reference": "openstack-selinux-0:0.8.14-5.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-selinux-0:0.8.14-5.el7ost.src as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openstack-selinux-0:0.8.14-5.el7ost.src"
},
"product_reference": "openstack-selinux-0:0.8.14-5.el7ost.src",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.src as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.src"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64 as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch"
},
"product_reference": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
},
"product_reference": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.src as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.src"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.src",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64 as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64"
},
"product_reference": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch"
},
"product_reference": "openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch as a component of OpenStack 10.0 Tools for RHEL 7",
"product_id": "7Server-RH7-RHOS-DEVTOOLS-10.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
},
"product_reference": "python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-DEVTOOLS-10.0"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Maxime Coquelin"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2018-1059",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2018-01-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1544298"
}
],
"notes": [
{
"category": "description",
"text": "The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dpdk: Information exposure in unchecked guest physical to host virtual address translations",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat OpenStack Platform versions 7 to 9 provided openvswitch-dpdk as a technical preview for customers, it was provided without support and is not intended on being deployed in production.\n\nRed Hat Ceph Storage version 3 provides ceph bundled with DPDK as a technical preview for customers. It was provided without support and is not intended on being deployed in production.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-10.0:openstack-selinux-0:0.8.14-5.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-selinux-0:0.8.14-5.el7ost.src",
"7Server-RH7-RHOS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-10.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-10.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
},
{
"category": "external",
"summary": "RHBZ#1544298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1059",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2018-1059",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
}
],
"release_date": "2018-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-06-28T15:42:37+00:00",
"details": "Before applying this update, ensure all previously released errata relevant\nto your system have been applied.\n\nRed Hat OpenStack Platform 10 runs on Red Hat Enterprise Linux 7.4.\n\nThe Red Hat OpenStack Platform 10 Release Notes contain the following:\n* An explanation of the way in which the provided components interact to\nform a working cloud computing environment.\n* Technology Previews, Recommended Practices, and Known Issues.\n* The channels required for Red Hat OpenStack Platform 10, including which\nchannels need to be enabled and disabled.\n\nThe Release Notes are available at:\nhttps://access.redhat.com/documentation/en/red-hat-openstack-platform/10/paged/release-notes\n\nThis update is available through \u0027yum update\u0027 on systems registered through\nRed Hat Subscription Manager. For more information about Red Hat\nSubscription Manager, see:\n\nhttps://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html",
"product_ids": [
"7Server-RH7-RHOS-10.0:openstack-selinux-0:0.8.14-5.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-selinux-0:0.8.14-5.el7ost.src",
"7Server-RH7-RHOS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-10.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-10.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2102"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-10.0:openstack-selinux-0:0.8.14-5.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-selinux-0:0.8.14-5.el7ost.src",
"7Server-RH7-RHOS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-10.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-10.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.src",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-debuginfo-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-devel-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-central-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-common-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-host-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.1.x86_64",
"7Server-RH7-RHOS-DEVTOOLS-10.0:openvswitch-test-0:2.9.0-19.el7fdp.1.noarch",
"7Server-RH7-RHOS-DEVTOOLS-10.0:python-openvswitch-0:2.9.0-19.el7fdp.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dpdk: Information exposure in unchecked guest physical to host virtual address translations"
}
]
}
rhsa-2018:1267
Vulnerability from csaf_redhat
Published
2018-04-30 10:00
Modified
2024-11-14 23:41
Summary
Red Hat Security Advisory: openvswitch security and bug fix update
Notes
Topic
An update for openvswitch is now available for Fast Datapath for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 24 July 2018]
This advisory has been updated to provide the openvswitch packages also for the IBM POWER, little endian architecture.
Details
Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic.
Security Fix(es):
* dpdk: Information exposure in unchecked guest physical to host virtual address translations (CVE-2018-1059)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
This issue was discovered by Maxime Coquelin (Red Hat).
Bug Fix(es):
* The openvswitch packages have been upgraded to upstream version 2.9.0, which provides a number of bug fixes and enhancements over the previous version. (BZ#1560628)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for openvswitch is now available for Fast Datapath for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 24 July 2018]\nThis advisory has been updated to provide the openvswitch packages also for the IBM POWER, little endian architecture.",
"title": "Topic"
},
{
"category": "general",
"text": "Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic.\n\nSecurity Fix(es):\n\n* dpdk: Information exposure in unchecked guest physical to host virtual address translations (CVE-2018-1059)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nThis issue was discovered by Maxime Coquelin (Red Hat).\n\nBug Fix(es):\n\n* The openvswitch packages have been upgraded to upstream version 2.9.0, which provides a number of bug fixes and enhancements over the previous version. (BZ#1560628)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:1267",
"url": "https://access.redhat.com/errata/RHSA-2018:1267"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1544298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"category": "external",
"summary": "1560628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1560628"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1267.json"
}
],
"title": "Red Hat Security Advisory: openvswitch security and bug fix update",
"tracking": {
"current_release_date": "2024-11-14T23:41:39+00:00",
"generator": {
"date": "2024-11-14T23:41:39+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2018:1267",
"initial_release_date": "2018-04-30T10:00:04+00:00",
"revision_history": [
{
"date": "2018-04-30T10:00:04+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-11-13T15:51:44+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T23:41:39+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Fast Datapath for Red Hat Enterprise Linux 7",
"product": {
"name": "Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
}
}
},
{
"category": "product_name",
"name": "Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product": {
"name": "Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::hypervisor"
}
}
}
],
"category": "product_family",
"name": "Fast Datapath"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"product": {
"name": "openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"product_id": "openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"product": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"product_id": "python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-19.el7fdp.src",
"product": {
"name": "openvswitch-0:2.9.0-19.el7fdp.src",
"product_id": "openvswitch-0:2.9.0-19.el7fdp.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.src as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-19.el7fdp.src"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.src",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-test-0:2.9.0-19.el7fdp.noarch as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.9.0-19.el7fdp.noarch"
},
"product_reference": "openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.noarch as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-19.el7fdp.noarch"
},
"product_reference": "python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.src as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-19.el7fdp.src"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.src",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-test-0:2.9.0-19.el7fdp.noarch as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-test-0:2.9.0-19.el7fdp.noarch"
},
"product_reference": "openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.noarch as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-19.el7fdp.noarch"
},
"product_reference": "python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Maxime Coquelin"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2018-1059",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2018-01-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1544298"
}
],
"notes": [
{
"category": "description",
"text": "The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dpdk: Information exposure in unchecked guest physical to host virtual address translations",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat OpenStack Platform versions 7 to 9 provided openvswitch-dpdk as a technical preview for customers, it was provided without support and is not intended on being deployed in production.\n\nRed Hat Ceph Storage version 3 provides ceph bundled with DPDK as a technical preview for customers. It was provided without support and is not intended on being deployed in production.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-19.el7fdp.src",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-19.el7fdp.src",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-19.el7fdp.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
},
{
"category": "external",
"summary": "RHBZ#1544298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1059",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2018-1059",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
}
],
"release_date": "2018-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-30T10:00:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-19.el7fdp.src",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-19.el7fdp.src",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-19.el7fdp.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-19.el7fdp.src",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-19.el7fdp.src",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-19.el7fdp.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dpdk: Information exposure in unchecked guest physical to host virtual address translations"
}
]
}
RHSA-2018:1267
Vulnerability from csaf_redhat
Published
2018-04-30 10:00
Modified
2024-11-14 23:41
Summary
Red Hat Security Advisory: openvswitch security and bug fix update
Notes
Topic
An update for openvswitch is now available for Fast Datapath for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 24 July 2018]
This advisory has been updated to provide the openvswitch packages also for the IBM POWER, little endian architecture.
Details
Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic.
Security Fix(es):
* dpdk: Information exposure in unchecked guest physical to host virtual address translations (CVE-2018-1059)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
This issue was discovered by Maxime Coquelin (Red Hat).
Bug Fix(es):
* The openvswitch packages have been upgraded to upstream version 2.9.0, which provides a number of bug fixes and enhancements over the previous version. (BZ#1560628)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for openvswitch is now available for Fast Datapath for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 24 July 2018]\nThis advisory has been updated to provide the openvswitch packages also for the IBM POWER, little endian architecture.",
"title": "Topic"
},
{
"category": "general",
"text": "Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic.\n\nSecurity Fix(es):\n\n* dpdk: Information exposure in unchecked guest physical to host virtual address translations (CVE-2018-1059)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nThis issue was discovered by Maxime Coquelin (Red Hat).\n\nBug Fix(es):\n\n* The openvswitch packages have been upgraded to upstream version 2.9.0, which provides a number of bug fixes and enhancements over the previous version. (BZ#1560628)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:1267",
"url": "https://access.redhat.com/errata/RHSA-2018:1267"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1544298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"category": "external",
"summary": "1560628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1560628"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1267.json"
}
],
"title": "Red Hat Security Advisory: openvswitch security and bug fix update",
"tracking": {
"current_release_date": "2024-11-14T23:41:39+00:00",
"generator": {
"date": "2024-11-14T23:41:39+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2018:1267",
"initial_release_date": "2018-04-30T10:00:04+00:00",
"revision_history": [
{
"date": "2018-04-30T10:00:04+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-11-13T15:51:44+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T23:41:39+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Fast Datapath for Red Hat Enterprise Linux 7",
"product": {
"name": "Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
}
}
},
{
"category": "product_name",
"name": "Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product": {
"name": "Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::hypervisor"
}
}
}
],
"category": "product_family",
"name": "Fast Datapath"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"product": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"product_id": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"product": {
"name": "openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"product_id": "openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"product": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"product_id": "python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "openvswitch-0:2.9.0-19.el7fdp.src",
"product": {
"name": "openvswitch-0:2.9.0-19.el7fdp.src",
"product_id": "openvswitch-0:2.9.0-19.el7fdp.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/[email protected]?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.src as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-19.el7fdp.src"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.src",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64 as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-test-0:2.9.0-19.el7fdp.noarch as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.9.0-19.el7fdp.noarch"
},
"product_reference": "openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.noarch as a component of Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts",
"product_id": "7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-19.el7fdp.noarch"
},
"product_reference": "python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"relates_to_product_reference": "7Server-7.6.EUS-RHV-4.2-Agents-eus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.src as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-19.el7fdp.src"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.src",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-0:2.9.0-19.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64"
},
"product_reference": "openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch-test-0:2.9.0-19.el7fdp.noarch as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:openvswitch-test-0:2.9.0-19.el7fdp.noarch"
},
"product_reference": "openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-openvswitch-0:2.9.0-19.el7fdp.noarch as a component of Fast Datapath for Red Hat Enterprise Linux 7",
"product_id": "7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-19.el7fdp.noarch"
},
"product_reference": "python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"relates_to_product_reference": "7Server-RH7-Fast-Datapath"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Maxime Coquelin"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2018-1059",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2018-01-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1544298"
}
],
"notes": [
{
"category": "description",
"text": "The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dpdk: Information exposure in unchecked guest physical to host virtual address translations",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat OpenStack Platform versions 7 to 9 provided openvswitch-dpdk as a technical preview for customers, it was provided without support and is not intended on being deployed in production.\n\nRed Hat Ceph Storage version 3 provides ceph bundled with DPDK as a technical preview for customers. It was provided without support and is not intended on being deployed in production.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-19.el7fdp.src",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-19.el7fdp.src",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-19.el7fdp.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
},
{
"category": "external",
"summary": "RHBZ#1544298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1059",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2018-1059",
"url": "https://access.redhat.com/security/cve/CVE-2018-1059"
}
],
"release_date": "2018-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-30T10:00:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-19.el7fdp.src",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-19.el7fdp.src",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-19.el7fdp.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-19.el7fdp.src",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"7Server-7.6.EUS-RHV-4.2-Agents-eus:python-openvswitch-0:2.9.0-19.el7fdp.noarch",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-19.el7fdp.src",
"7Server-RH7-Fast-Datapath:openvswitch-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-debuginfo-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-devel-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-central-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-common-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-host-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-ovn-vtep-0:2.9.0-19.el7fdp.x86_64",
"7Server-RH7-Fast-Datapath:openvswitch-test-0:2.9.0-19.el7fdp.noarch",
"7Server-RH7-Fast-Datapath:python-openvswitch-0:2.9.0-19.el7fdp.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dpdk: Information exposure in unchecked guest physical to host virtual address translations"
}
]
}
gsd-2018-1059
Vulnerability from gsd
Modified
2023-12-13 01:22
Details
The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2018-1059",
"description": "The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable.",
"id": "GSD-2018-1059",
"references": [
"https://www.suse.com/security/cve/CVE-2018-1059.html",
"https://access.redhat.com/errata/RHSA-2018:2524",
"https://access.redhat.com/errata/RHSA-2018:2102",
"https://access.redhat.com/errata/RHSA-2018:2038",
"https://access.redhat.com/errata/RHEA-2018:1547",
"https://access.redhat.com/errata/RHSA-2018:1267",
"https://ubuntu.com/security/CVE-2018-1059"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2018-1059"
],
"details": "The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable.",
"id": "GSD-2018-1059",
"modified": "2023-12-13T01:22:37.246817Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "[email protected]",
"DATE_PUBLIC": "2018-04-23T00:00:00",
"ID": "CVE-2018-1059",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "DPDK",
"version": {
"version_data": [
{
"version_value": "before 18.02.1"
}
]
}
}
]
},
"vendor_name": "Red Hat, Inc."
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-200"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "RHSA-2018:2524",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2524"
},
{
"name": "RHSA-2018:2102",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2102"
},
{
"name": "https://access.redhat.com/security/cve/cve-2018-1059",
"refsource": "MISC",
"url": "https://access.redhat.com/security/cve/cve-2018-1059"
},
{
"name": "USN-3642-2",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/3642-2/"
},
{
"name": "RHSA-2018:2038",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2038"
},
{
"name": "USN-3642-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/3642-1/"
},
{
"name": "RHSA-2018:1267",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1267"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298",
"refsource": "CONFIRM",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:redhat:ceph_storage:3.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:redhat:enterprise_linux_fast_datapath:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:redhat:openshift:3.0:*:*:*:enterprise:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:redhat:virtualization_manager:4.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:redhat:openstack:11:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:redhat:virtualization:4.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:dpdk:data_plane_development_kit:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "18.02.1",
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "[email protected]",
"ID": "CVE-2018-1059"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298",
"refsource": "CONFIRM",
"tags": [
"Issue Tracking",
"Third Party Advisory"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"name": "https://access.redhat.com/security/cve/cve-2018-1059",
"refsource": "MISC",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/security/cve/cve-2018-1059"
},
{
"name": "RHSA-2018:1267",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1267"
},
{
"name": "USN-3642-1",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/3642-1/"
},
{
"name": "USN-3642-2",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/3642-2/"
},
{
"name": "RHSA-2018:2038",
"refsource": "REDHAT",
"tags": [],
"url": "https://access.redhat.com/errata/RHSA-2018:2038"
},
{
"name": "RHSA-2018:2102",
"refsource": "REDHAT",
"tags": [],
"url": "https://access.redhat.com/errata/RHSA-2018:2102"
},
{
"name": "RHSA-2018:2524",
"refsource": "REDHAT",
"tags": [],
"url": "https://access.redhat.com/errata/RHSA-2018:2524"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.9,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 5.5,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "LOW",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"exploitabilityScore": 1.6,
"impactScore": 4.0
}
},
"lastModifiedDate": "2021-08-04T17:15Z",
"publishedDate": "2018-04-24T18:29Z"
}
}
}
suse-su-2018:3923-1
Vulnerability from csaf_suse
Published
2018-11-27 12:39
Modified
2018-11-27 12:39
Summary
Security update for dpdk
Notes
Title of the patch
Security update for dpdk
Description of the patch
This update for dpdk to version 16.11.8 provides the following security fix:
- CVE-2018-1059: restrict untrusted guest to misuse virtio to corrupt host application (ovs-dpdk) memory which could have lead all VM to lose connectivity (bsc#1089638)
and following non-security fixes:
- Enable the broadcom chipset family Broadcom NetXtreme II BCM57810 (bsc#1073363)
- Fix a latency problem by using cond_resched rather than schedule_timeout_interruptible (bsc#1069601)
- Fix a syntax error affecting csh environment configuration (bsc#1102310)
- Fixes in net/bnxt:
* Fix HW Tx checksum offload check
* Fix incorrect IO address handling in Tx
* Fix Rx ring count limitation
* Check access denied for HWRM commands
* Fix RETA size
* Fix close operation
- Fixes in eal/linux:
* Fix an invalid syntax in interrupts
* Fix return codes on thread naming failure
- Fixes in kni:
* Fix crash with null name
* Fix build with gcc 8.1
- Fixes in net/thunderx:
* Fix build with gcc optimization on
* Avoid sq door bell write on zero packet
- net/bonding: Fix MAC address reset
- vhost: Fix missing increment of log cache count
Patchnames
SUSE-SLE-SDK-12-SP3-2018-2795,SUSE-SLE-SERVER-12-SP3-2018-2795
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for dpdk",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\n \nThis update for dpdk to version 16.11.8 provides the following security fix:\n\n- CVE-2018-1059: restrict untrusted guest to misuse virtio to corrupt host application (ovs-dpdk) memory which could have lead all VM to lose connectivity (bsc#1089638)\n\nand following non-security fixes:\n\n- Enable the broadcom chipset family Broadcom NetXtreme II BCM57810 (bsc#1073363)\n- Fix a latency problem by using cond_resched rather than schedule_timeout_interruptible (bsc#1069601)\n- Fix a syntax error affecting csh environment configuration (bsc#1102310)\n- Fixes in net/bnxt:\n * Fix HW Tx checksum offload check\n * Fix incorrect IO address handling in Tx\n * Fix Rx ring count limitation\n * Check access denied for HWRM commands\n * Fix RETA size\n * Fix close operation\n- Fixes in eal/linux:\n * Fix an invalid syntax in interrupts\n * Fix return codes on thread naming failure\n- Fixes in kni:\n * Fix crash with null name\n * Fix build with gcc 8.1\n- Fixes in net/thunderx:\n * Fix build with gcc optimization on\n * Avoid sq door bell write on zero packet\n- net/bonding: Fix MAC address reset\n- vhost: Fix missing increment of log cache count\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-SDK-12-SP3-2018-2795,SUSE-SLE-SERVER-12-SP3-2018-2795",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_3923-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:3923-1",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20183923-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:3923-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2018-November/004895.html"
},
{
"category": "self",
"summary": "SUSE Bug 1069601",
"url": "https://bugzilla.suse.com/1069601"
},
{
"category": "self",
"summary": "SUSE Bug 1073363",
"url": "https://bugzilla.suse.com/1073363"
},
{
"category": "self",
"summary": "SUSE Bug 1089638",
"url": "https://bugzilla.suse.com/1089638"
},
{
"category": "self",
"summary": "SUSE Bug 1102310",
"url": "https://bugzilla.suse.com/1102310"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1059 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1059/"
}
],
"title": "Security update for dpdk",
"tracking": {
"current_release_date": "2018-11-27T12:39:34Z",
"generator": {
"date": "2018-11-27T12:39:34Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:3923-1",
"initial_release_date": "2018-11-27T12:39:34Z",
"revision_history": [
{
"date": "2018-11-27T12:39:34Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "dpdk-devel-16.11.8-8.10.2.aarch64",
"product": {
"name": "dpdk-devel-16.11.8-8.10.2.aarch64",
"product_id": "dpdk-devel-16.11.8-8.10.2.aarch64"
}
},
{
"category": "product_version",
"name": "dpdk-thunderx-devel-16.11.8-8.10.2.aarch64",
"product": {
"name": "dpdk-thunderx-devel-16.11.8-8.10.2.aarch64",
"product_id": "dpdk-thunderx-devel-16.11.8-8.10.2.aarch64"
}
},
{
"category": "product_version",
"name": "dpdk-16.11.8-8.10.2.aarch64",
"product": {
"name": "dpdk-16.11.8-8.10.2.aarch64",
"product_id": "dpdk-16.11.8-8.10.2.aarch64"
}
},
{
"category": "product_version",
"name": "dpdk-thunderx-16.11.8-8.10.2.aarch64",
"product": {
"name": "dpdk-thunderx-16.11.8-8.10.2.aarch64",
"product_id": "dpdk-thunderx-16.11.8-8.10.2.aarch64"
}
},
{
"category": "product_version",
"name": "dpdk-thunderx-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.aarch64",
"product": {
"name": "dpdk-thunderx-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.aarch64",
"product_id": "dpdk-thunderx-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.aarch64"
}
},
{
"category": "product_version",
"name": "dpdk-tools-16.11.8-8.10.2.aarch64",
"product": {
"name": "dpdk-tools-16.11.8-8.10.2.aarch64",
"product_id": "dpdk-tools-16.11.8-8.10.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "dpdk-devel-16.11.8-8.10.2.ppc64le",
"product": {
"name": "dpdk-devel-16.11.8-8.10.2.ppc64le",
"product_id": "dpdk-devel-16.11.8-8.10.2.ppc64le"
}
},
{
"category": "product_version",
"name": "dpdk-16.11.8-8.10.2.ppc64le",
"product": {
"name": "dpdk-16.11.8-8.10.2.ppc64le",
"product_id": "dpdk-16.11.8-8.10.2.ppc64le"
}
},
{
"category": "product_version",
"name": "dpdk-tools-16.11.8-8.10.2.ppc64le",
"product": {
"name": "dpdk-tools-16.11.8-8.10.2.ppc64le",
"product_id": "dpdk-tools-16.11.8-8.10.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "dpdk-devel-16.11.8-8.10.2.x86_64",
"product": {
"name": "dpdk-devel-16.11.8-8.10.2.x86_64",
"product_id": "dpdk-devel-16.11.8-8.10.2.x86_64"
}
},
{
"category": "product_version",
"name": "dpdk-16.11.8-8.10.2.x86_64",
"product": {
"name": "dpdk-16.11.8-8.10.2.x86_64",
"product_id": "dpdk-16.11.8-8.10.2.x86_64"
}
},
{
"category": "product_version",
"name": "dpdk-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.x86_64",
"product": {
"name": "dpdk-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.x86_64",
"product_id": "dpdk-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.x86_64"
}
},
{
"category": "product_version",
"name": "dpdk-tools-16.11.8-8.10.2.x86_64",
"product": {
"name": "dpdk-tools-16.11.8-8.10.2.x86_64",
"product_id": "dpdk-tools-16.11.8-8.10.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp3"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-devel-16.11.8-8.10.2.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-devel-16.11.8-8.10.2.aarch64"
},
"product_reference": "dpdk-devel-16.11.8-8.10.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-devel-16.11.8-8.10.2.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-devel-16.11.8-8.10.2.ppc64le"
},
"product_reference": "dpdk-devel-16.11.8-8.10.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-devel-16.11.8-8.10.2.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-devel-16.11.8-8.10.2.x86_64"
},
"product_reference": "dpdk-devel-16.11.8-8.10.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-thunderx-devel-16.11.8-8.10.2.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-thunderx-devel-16.11.8-8.10.2.aarch64"
},
"product_reference": "dpdk-thunderx-devel-16.11.8-8.10.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-16.11.8-8.10.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:dpdk-16.11.8-8.10.2.aarch64"
},
"product_reference": "dpdk-16.11.8-8.10.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-16.11.8-8.10.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:dpdk-16.11.8-8.10.2.ppc64le"
},
"product_reference": "dpdk-16.11.8-8.10.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-16.11.8-8.10.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:dpdk-16.11.8-8.10.2.x86_64"
},
"product_reference": "dpdk-16.11.8-8.10.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:dpdk-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.x86_64"
},
"product_reference": "dpdk-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-thunderx-16.11.8-8.10.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:dpdk-thunderx-16.11.8-8.10.2.aarch64"
},
"product_reference": "dpdk-thunderx-16.11.8-8.10.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-thunderx-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:dpdk-thunderx-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.aarch64"
},
"product_reference": "dpdk-thunderx-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-tools-16.11.8-8.10.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:dpdk-tools-16.11.8-8.10.2.aarch64"
},
"product_reference": "dpdk-tools-16.11.8-8.10.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-tools-16.11.8-8.10.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:dpdk-tools-16.11.8-8.10.2.ppc64le"
},
"product_reference": "dpdk-tools-16.11.8-8.10.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-tools-16.11.8-8.10.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:dpdk-tools-16.11.8-8.10.2.x86_64"
},
"product_reference": "dpdk-tools-16.11.8-8.10.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-16.11.8-8.10.2.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-16.11.8-8.10.2.aarch64"
},
"product_reference": "dpdk-16.11.8-8.10.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-16.11.8-8.10.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-16.11.8-8.10.2.ppc64le"
},
"product_reference": "dpdk-16.11.8-8.10.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-16.11.8-8.10.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-16.11.8-8.10.2.x86_64"
},
"product_reference": "dpdk-16.11.8-8.10.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.x86_64"
},
"product_reference": "dpdk-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-thunderx-16.11.8-8.10.2.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-thunderx-16.11.8-8.10.2.aarch64"
},
"product_reference": "dpdk-thunderx-16.11.8-8.10.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-thunderx-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-thunderx-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.aarch64"
},
"product_reference": "dpdk-thunderx-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-tools-16.11.8-8.10.2.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-tools-16.11.8-8.10.2.aarch64"
},
"product_reference": "dpdk-tools-16.11.8-8.10.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-tools-16.11.8-8.10.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-tools-16.11.8-8.10.2.ppc64le"
},
"product_reference": "dpdk-tools-16.11.8-8.10.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-tools-16.11.8-8.10.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-tools-16.11.8-8.10.2.x86_64"
},
"product_reference": "dpdk-tools-16.11.8-8.10.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1059",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1059"
}
],
"notes": [
{
"category": "general",
"text": "The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP3:dpdk-16.11.8-8.10.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-16.11.8-8.10.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:dpdk-16.11.8-8.10.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-thunderx-16.11.8-8.10.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-thunderx-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-tools-16.11.8-8.10.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-tools-16.11.8-8.10.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:dpdk-tools-16.11.8-8.10.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-16.11.8-8.10.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-16.11.8-8.10.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-16.11.8-8.10.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-thunderx-16.11.8-8.10.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-thunderx-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-tools-16.11.8-8.10.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-tools-16.11.8-8.10.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-tools-16.11.8-8.10.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-devel-16.11.8-8.10.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-devel-16.11.8-8.10.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-devel-16.11.8-8.10.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-thunderx-devel-16.11.8-8.10.2.aarch64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1059",
"url": "https://www.suse.com/security/cve/CVE-2018-1059"
},
{
"category": "external",
"summary": "SUSE Bug 1089638 for CVE-2018-1059",
"url": "https://bugzilla.suse.com/1089638"
},
{
"category": "external",
"summary": "SUSE Bug 1090647 for CVE-2018-1059",
"url": "https://bugzilla.suse.com/1090647"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP3:dpdk-16.11.8-8.10.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-16.11.8-8.10.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:dpdk-16.11.8-8.10.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-thunderx-16.11.8-8.10.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-thunderx-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-tools-16.11.8-8.10.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-tools-16.11.8-8.10.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:dpdk-tools-16.11.8-8.10.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-16.11.8-8.10.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-16.11.8-8.10.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-16.11.8-8.10.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-thunderx-16.11.8-8.10.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-thunderx-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-tools-16.11.8-8.10.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-tools-16.11.8-8.10.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-tools-16.11.8-8.10.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-devel-16.11.8-8.10.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-devel-16.11.8-8.10.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-devel-16.11.8-8.10.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-thunderx-devel-16.11.8-8.10.2.aarch64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP3:dpdk-16.11.8-8.10.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-16.11.8-8.10.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:dpdk-16.11.8-8.10.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-thunderx-16.11.8-8.10.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-thunderx-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-tools-16.11.8-8.10.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-tools-16.11.8-8.10.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:dpdk-tools-16.11.8-8.10.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-16.11.8-8.10.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-16.11.8-8.10.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-16.11.8-8.10.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-thunderx-16.11.8-8.10.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-thunderx-kmp-default-16.11.8_k4.4.156_94.64-8.10.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-tools-16.11.8-8.10.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-tools-16.11.8-8.10.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-tools-16.11.8-8.10.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-devel-16.11.8-8.10.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-devel-16.11.8-8.10.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-devel-16.11.8-8.10.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-thunderx-devel-16.11.8-8.10.2.aarch64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-11-27T12:39:34Z",
"details": "moderate"
}
],
"title": "CVE-2018-1059"
}
]
}
suse-su-2018:1492-1
Vulnerability from csaf_suse
Published
2018-06-03 08:56
Modified
2018-06-03 08:56
Summary
Security update for dpdk-thunderxdpdk
Notes
Title of the patch
Security update for dpdk-thunderxdpdk
Description of the patch
This update fixes the following issues:
- CVE-2018-1059: The DPDK vhost-user interface does not check to verify that all the requested guest
physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses
translations. This may lead to a malicious guest exposing vhost-user backend process memory.
All versions before 18.02.1 are vulnerable. (bsc#1089638).
Patchnames
SUSE-SLE-SDK-12-SP3-2018-1017,SUSE-SLE-SERVER-12-SP3-2018-1017
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for dpdk-thunderxdpdk",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\n This update fixes the following issues:\n \n - CVE-2018-1059: The DPDK vhost-user interface does not check to verify that all the requested guest \n physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses \n translations. This may lead to a malicious guest exposing vhost-user backend process memory. \n All versions before 18.02.1 are vulnerable. (bsc#1089638).\n\n ",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-SDK-12-SP3-2018-1017,SUSE-SLE-SERVER-12-SP3-2018-1017",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_1492-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:1492-1",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181492-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:1492-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2018-June/004108.html"
},
{
"category": "self",
"summary": "SUSE Bug 1089638",
"url": "https://bugzilla.suse.com/1089638"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1059 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1059/"
}
],
"title": "Security update for dpdk-thunderxdpdk",
"tracking": {
"current_release_date": "2018-06-03T08:56:17Z",
"generator": {
"date": "2018-06-03T08:56:17Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:1492-1",
"initial_release_date": "2018-06-03T08:56:17Z",
"revision_history": [
{
"date": "2018-06-03T08:56:17Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "dpdk-devel-16.11.6-8.4.2.aarch64",
"product": {
"name": "dpdk-devel-16.11.6-8.4.2.aarch64",
"product_id": "dpdk-devel-16.11.6-8.4.2.aarch64"
}
},
{
"category": "product_version",
"name": "dpdk-thunderx-devel-16.11.6-8.4.2.aarch64",
"product": {
"name": "dpdk-thunderx-devel-16.11.6-8.4.2.aarch64",
"product_id": "dpdk-thunderx-devel-16.11.6-8.4.2.aarch64"
}
},
{
"category": "product_version",
"name": "dpdk-16.11.6-8.4.2.aarch64",
"product": {
"name": "dpdk-16.11.6-8.4.2.aarch64",
"product_id": "dpdk-16.11.6-8.4.2.aarch64"
}
},
{
"category": "product_version",
"name": "dpdk-thunderx-16.11.6-8.4.2.aarch64",
"product": {
"name": "dpdk-thunderx-16.11.6-8.4.2.aarch64",
"product_id": "dpdk-thunderx-16.11.6-8.4.2.aarch64"
}
},
{
"category": "product_version",
"name": "dpdk-thunderx-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.aarch64",
"product": {
"name": "dpdk-thunderx-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.aarch64",
"product_id": "dpdk-thunderx-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.aarch64"
}
},
{
"category": "product_version",
"name": "dpdk-tools-16.11.6-8.4.2.aarch64",
"product": {
"name": "dpdk-tools-16.11.6-8.4.2.aarch64",
"product_id": "dpdk-tools-16.11.6-8.4.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "dpdk-devel-16.11.6-8.4.2.ppc64le",
"product": {
"name": "dpdk-devel-16.11.6-8.4.2.ppc64le",
"product_id": "dpdk-devel-16.11.6-8.4.2.ppc64le"
}
},
{
"category": "product_version",
"name": "dpdk-16.11.6-8.4.2.ppc64le",
"product": {
"name": "dpdk-16.11.6-8.4.2.ppc64le",
"product_id": "dpdk-16.11.6-8.4.2.ppc64le"
}
},
{
"category": "product_version",
"name": "dpdk-tools-16.11.6-8.4.2.ppc64le",
"product": {
"name": "dpdk-tools-16.11.6-8.4.2.ppc64le",
"product_id": "dpdk-tools-16.11.6-8.4.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "dpdk-devel-16.11.6-8.4.2.x86_64",
"product": {
"name": "dpdk-devel-16.11.6-8.4.2.x86_64",
"product_id": "dpdk-devel-16.11.6-8.4.2.x86_64"
}
},
{
"category": "product_version",
"name": "dpdk-16.11.6-8.4.2.x86_64",
"product": {
"name": "dpdk-16.11.6-8.4.2.x86_64",
"product_id": "dpdk-16.11.6-8.4.2.x86_64"
}
},
{
"category": "product_version",
"name": "dpdk-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.x86_64",
"product": {
"name": "dpdk-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.x86_64",
"product_id": "dpdk-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.x86_64"
}
},
{
"category": "product_version",
"name": "dpdk-tools-16.11.6-8.4.2.x86_64",
"product": {
"name": "dpdk-tools-16.11.6-8.4.2.x86_64",
"product_id": "dpdk-tools-16.11.6-8.4.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp3"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-devel-16.11.6-8.4.2.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-devel-16.11.6-8.4.2.aarch64"
},
"product_reference": "dpdk-devel-16.11.6-8.4.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-devel-16.11.6-8.4.2.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-devel-16.11.6-8.4.2.ppc64le"
},
"product_reference": "dpdk-devel-16.11.6-8.4.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-devel-16.11.6-8.4.2.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-devel-16.11.6-8.4.2.x86_64"
},
"product_reference": "dpdk-devel-16.11.6-8.4.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-thunderx-devel-16.11.6-8.4.2.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-thunderx-devel-16.11.6-8.4.2.aarch64"
},
"product_reference": "dpdk-thunderx-devel-16.11.6-8.4.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-16.11.6-8.4.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:dpdk-16.11.6-8.4.2.aarch64"
},
"product_reference": "dpdk-16.11.6-8.4.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-16.11.6-8.4.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:dpdk-16.11.6-8.4.2.ppc64le"
},
"product_reference": "dpdk-16.11.6-8.4.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-16.11.6-8.4.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:dpdk-16.11.6-8.4.2.x86_64"
},
"product_reference": "dpdk-16.11.6-8.4.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:dpdk-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.x86_64"
},
"product_reference": "dpdk-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-thunderx-16.11.6-8.4.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:dpdk-thunderx-16.11.6-8.4.2.aarch64"
},
"product_reference": "dpdk-thunderx-16.11.6-8.4.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-thunderx-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:dpdk-thunderx-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.aarch64"
},
"product_reference": "dpdk-thunderx-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-tools-16.11.6-8.4.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:dpdk-tools-16.11.6-8.4.2.aarch64"
},
"product_reference": "dpdk-tools-16.11.6-8.4.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-tools-16.11.6-8.4.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:dpdk-tools-16.11.6-8.4.2.ppc64le"
},
"product_reference": "dpdk-tools-16.11.6-8.4.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-tools-16.11.6-8.4.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:dpdk-tools-16.11.6-8.4.2.x86_64"
},
"product_reference": "dpdk-tools-16.11.6-8.4.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-16.11.6-8.4.2.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-16.11.6-8.4.2.aarch64"
},
"product_reference": "dpdk-16.11.6-8.4.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-16.11.6-8.4.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-16.11.6-8.4.2.ppc64le"
},
"product_reference": "dpdk-16.11.6-8.4.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-16.11.6-8.4.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-16.11.6-8.4.2.x86_64"
},
"product_reference": "dpdk-16.11.6-8.4.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.x86_64"
},
"product_reference": "dpdk-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-thunderx-16.11.6-8.4.2.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-thunderx-16.11.6-8.4.2.aarch64"
},
"product_reference": "dpdk-thunderx-16.11.6-8.4.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-thunderx-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-thunderx-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.aarch64"
},
"product_reference": "dpdk-thunderx-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-tools-16.11.6-8.4.2.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-tools-16.11.6-8.4.2.aarch64"
},
"product_reference": "dpdk-tools-16.11.6-8.4.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-tools-16.11.6-8.4.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-tools-16.11.6-8.4.2.ppc64le"
},
"product_reference": "dpdk-tools-16.11.6-8.4.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-tools-16.11.6-8.4.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-tools-16.11.6-8.4.2.x86_64"
},
"product_reference": "dpdk-tools-16.11.6-8.4.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1059",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1059"
}
],
"notes": [
{
"category": "general",
"text": "The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP3:dpdk-16.11.6-8.4.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-16.11.6-8.4.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:dpdk-16.11.6-8.4.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-thunderx-16.11.6-8.4.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-thunderx-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-tools-16.11.6-8.4.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-tools-16.11.6-8.4.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:dpdk-tools-16.11.6-8.4.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-16.11.6-8.4.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-16.11.6-8.4.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-16.11.6-8.4.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-thunderx-16.11.6-8.4.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-thunderx-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-tools-16.11.6-8.4.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-tools-16.11.6-8.4.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-tools-16.11.6-8.4.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-devel-16.11.6-8.4.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-devel-16.11.6-8.4.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-devel-16.11.6-8.4.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-thunderx-devel-16.11.6-8.4.2.aarch64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1059",
"url": "https://www.suse.com/security/cve/CVE-2018-1059"
},
{
"category": "external",
"summary": "SUSE Bug 1089638 for CVE-2018-1059",
"url": "https://bugzilla.suse.com/1089638"
},
{
"category": "external",
"summary": "SUSE Bug 1090647 for CVE-2018-1059",
"url": "https://bugzilla.suse.com/1090647"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP3:dpdk-16.11.6-8.4.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-16.11.6-8.4.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:dpdk-16.11.6-8.4.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-thunderx-16.11.6-8.4.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-thunderx-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-tools-16.11.6-8.4.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-tools-16.11.6-8.4.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:dpdk-tools-16.11.6-8.4.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-16.11.6-8.4.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-16.11.6-8.4.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-16.11.6-8.4.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-thunderx-16.11.6-8.4.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-thunderx-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-tools-16.11.6-8.4.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-tools-16.11.6-8.4.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-tools-16.11.6-8.4.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-devel-16.11.6-8.4.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-devel-16.11.6-8.4.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-devel-16.11.6-8.4.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-thunderx-devel-16.11.6-8.4.2.aarch64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP3:dpdk-16.11.6-8.4.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-16.11.6-8.4.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:dpdk-16.11.6-8.4.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-thunderx-16.11.6-8.4.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-thunderx-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-tools-16.11.6-8.4.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:dpdk-tools-16.11.6-8.4.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:dpdk-tools-16.11.6-8.4.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-16.11.6-8.4.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-16.11.6-8.4.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-16.11.6-8.4.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-thunderx-16.11.6-8.4.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-thunderx-kmp-default-16.11.6_k4.4.126_94.22-8.4.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-tools-16.11.6-8.4.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-tools-16.11.6-8.4.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:dpdk-tools-16.11.6-8.4.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-devel-16.11.6-8.4.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-devel-16.11.6-8.4.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-devel-16.11.6-8.4.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:dpdk-thunderx-devel-16.11.6-8.4.2.aarch64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-06-03T08:56:17Z",
"details": "moderate"
}
],
"title": "CVE-2018-1059"
}
]
}
ghsa-ww8j-hjq3-7m8r
Vulnerability from github
Published
2022-05-13 01:07
Modified
2022-05-13 01:07
Severity ?
VLAI Severity ?
Details
The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable.
{
"affected": [],
"aliases": [
"CVE-2018-1059"
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2018-04-24T18:29:00Z",
"severity": "MODERATE"
},
"details": "The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable.",
"id": "GHSA-ww8j-hjq3-7m8r",
"modified": "2022-05-13T01:07:32Z",
"published": "2022-05-13T01:07:32Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1059"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:1267"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:2038"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:2102"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:2524"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/cve-2018-1059"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/3642-1"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/3642-2"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"type": "CVSS_V3"
}
]
}
opensuse-su-2024:10727-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
dpdk-19.11.8-2.7 on GA media
Notes
Title of the patch
dpdk-19.11.8-2.7 on GA media
Description of the patch
These are all security issues fixed in the dpdk-19.11.8-2.7 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-10727
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "dpdk-19.11.8-2.7 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the dpdk-19.11.8-2.7 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-10727",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10727-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1059 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1059/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-14818 page",
"url": "https://www.suse.com/security/cve/CVE-2019-14818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-10722 page",
"url": "https://www.suse.com/security/cve/CVE-2020-10722/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-10725 page",
"url": "https://www.suse.com/security/cve/CVE-2020-10725/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14374 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14374/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14375 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14375/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14376 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14376/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14378 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14378/"
}
],
"title": "dpdk-19.11.8-2.7 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:10727-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "dpdk-19.11.8-2.7.aarch64",
"product": {
"name": "dpdk-19.11.8-2.7.aarch64",
"product_id": "dpdk-19.11.8-2.7.aarch64"
}
},
{
"category": "product_version",
"name": "dpdk-devel-19.11.8-2.7.aarch64",
"product": {
"name": "dpdk-devel-19.11.8-2.7.aarch64",
"product_id": "dpdk-devel-19.11.8-2.7.aarch64"
}
},
{
"category": "product_version",
"name": "dpdk-doc-19.11.8-2.7.aarch64",
"product": {
"name": "dpdk-doc-19.11.8-2.7.aarch64",
"product_id": "dpdk-doc-19.11.8-2.7.aarch64"
}
},
{
"category": "product_version",
"name": "dpdk-examples-19.11.8-2.7.aarch64",
"product": {
"name": "dpdk-examples-19.11.8-2.7.aarch64",
"product_id": "dpdk-examples-19.11.8-2.7.aarch64"
}
},
{
"category": "product_version",
"name": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64",
"product": {
"name": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64",
"product_id": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64"
}
},
{
"category": "product_version",
"name": "dpdk-tools-19.11.8-2.7.aarch64",
"product": {
"name": "dpdk-tools-19.11.8-2.7.aarch64",
"product_id": "dpdk-tools-19.11.8-2.7.aarch64"
}
},
{
"category": "product_version",
"name": "libdpdk-20_0-19.11.8-2.7.aarch64",
"product": {
"name": "libdpdk-20_0-19.11.8-2.7.aarch64",
"product_id": "libdpdk-20_0-19.11.8-2.7.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "dpdk-19.11.8-2.7.ppc64le",
"product": {
"name": "dpdk-19.11.8-2.7.ppc64le",
"product_id": "dpdk-19.11.8-2.7.ppc64le"
}
},
{
"category": "product_version",
"name": "dpdk-devel-19.11.8-2.7.ppc64le",
"product": {
"name": "dpdk-devel-19.11.8-2.7.ppc64le",
"product_id": "dpdk-devel-19.11.8-2.7.ppc64le"
}
},
{
"category": "product_version",
"name": "dpdk-doc-19.11.8-2.7.ppc64le",
"product": {
"name": "dpdk-doc-19.11.8-2.7.ppc64le",
"product_id": "dpdk-doc-19.11.8-2.7.ppc64le"
}
},
{
"category": "product_version",
"name": "dpdk-examples-19.11.8-2.7.ppc64le",
"product": {
"name": "dpdk-examples-19.11.8-2.7.ppc64le",
"product_id": "dpdk-examples-19.11.8-2.7.ppc64le"
}
},
{
"category": "product_version",
"name": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le",
"product": {
"name": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le",
"product_id": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le"
}
},
{
"category": "product_version",
"name": "dpdk-tools-19.11.8-2.7.ppc64le",
"product": {
"name": "dpdk-tools-19.11.8-2.7.ppc64le",
"product_id": "dpdk-tools-19.11.8-2.7.ppc64le"
}
},
{
"category": "product_version",
"name": "libdpdk-20_0-19.11.8-2.7.ppc64le",
"product": {
"name": "libdpdk-20_0-19.11.8-2.7.ppc64le",
"product_id": "libdpdk-20_0-19.11.8-2.7.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "dpdk-19.11.8-2.7.s390x",
"product": {
"name": "dpdk-19.11.8-2.7.s390x",
"product_id": "dpdk-19.11.8-2.7.s390x"
}
},
{
"category": "product_version",
"name": "dpdk-devel-19.11.8-2.7.s390x",
"product": {
"name": "dpdk-devel-19.11.8-2.7.s390x",
"product_id": "dpdk-devel-19.11.8-2.7.s390x"
}
},
{
"category": "product_version",
"name": "dpdk-doc-19.11.8-2.7.s390x",
"product": {
"name": "dpdk-doc-19.11.8-2.7.s390x",
"product_id": "dpdk-doc-19.11.8-2.7.s390x"
}
},
{
"category": "product_version",
"name": "dpdk-examples-19.11.8-2.7.s390x",
"product": {
"name": "dpdk-examples-19.11.8-2.7.s390x",
"product_id": "dpdk-examples-19.11.8-2.7.s390x"
}
},
{
"category": "product_version",
"name": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x",
"product": {
"name": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x",
"product_id": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x"
}
},
{
"category": "product_version",
"name": "dpdk-tools-19.11.8-2.7.s390x",
"product": {
"name": "dpdk-tools-19.11.8-2.7.s390x",
"product_id": "dpdk-tools-19.11.8-2.7.s390x"
}
},
{
"category": "product_version",
"name": "libdpdk-20_0-19.11.8-2.7.s390x",
"product": {
"name": "libdpdk-20_0-19.11.8-2.7.s390x",
"product_id": "libdpdk-20_0-19.11.8-2.7.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "dpdk-19.11.8-2.7.x86_64",
"product": {
"name": "dpdk-19.11.8-2.7.x86_64",
"product_id": "dpdk-19.11.8-2.7.x86_64"
}
},
{
"category": "product_version",
"name": "dpdk-devel-19.11.8-2.7.x86_64",
"product": {
"name": "dpdk-devel-19.11.8-2.7.x86_64",
"product_id": "dpdk-devel-19.11.8-2.7.x86_64"
}
},
{
"category": "product_version",
"name": "dpdk-doc-19.11.8-2.7.x86_64",
"product": {
"name": "dpdk-doc-19.11.8-2.7.x86_64",
"product_id": "dpdk-doc-19.11.8-2.7.x86_64"
}
},
{
"category": "product_version",
"name": "dpdk-examples-19.11.8-2.7.x86_64",
"product": {
"name": "dpdk-examples-19.11.8-2.7.x86_64",
"product_id": "dpdk-examples-19.11.8-2.7.x86_64"
}
},
{
"category": "product_version",
"name": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64",
"product": {
"name": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64",
"product_id": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64"
}
},
{
"category": "product_version",
"name": "dpdk-tools-19.11.8-2.7.x86_64",
"product": {
"name": "dpdk-tools-19.11.8-2.7.x86_64",
"product_id": "dpdk-tools-19.11.8-2.7.x86_64"
}
},
{
"category": "product_version",
"name": "libdpdk-20_0-19.11.8-2.7.x86_64",
"product": {
"name": "libdpdk-20_0-19.11.8-2.7.x86_64",
"product_id": "libdpdk-20_0-19.11.8-2.7.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-19.11.8-2.7.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64"
},
"product_reference": "dpdk-19.11.8-2.7.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-19.11.8-2.7.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le"
},
"product_reference": "dpdk-19.11.8-2.7.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-19.11.8-2.7.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x"
},
"product_reference": "dpdk-19.11.8-2.7.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-19.11.8-2.7.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64"
},
"product_reference": "dpdk-19.11.8-2.7.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-devel-19.11.8-2.7.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64"
},
"product_reference": "dpdk-devel-19.11.8-2.7.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-devel-19.11.8-2.7.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le"
},
"product_reference": "dpdk-devel-19.11.8-2.7.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-devel-19.11.8-2.7.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x"
},
"product_reference": "dpdk-devel-19.11.8-2.7.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-devel-19.11.8-2.7.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64"
},
"product_reference": "dpdk-devel-19.11.8-2.7.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-doc-19.11.8-2.7.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64"
},
"product_reference": "dpdk-doc-19.11.8-2.7.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-doc-19.11.8-2.7.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le"
},
"product_reference": "dpdk-doc-19.11.8-2.7.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-doc-19.11.8-2.7.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x"
},
"product_reference": "dpdk-doc-19.11.8-2.7.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-doc-19.11.8-2.7.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64"
},
"product_reference": "dpdk-doc-19.11.8-2.7.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-examples-19.11.8-2.7.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64"
},
"product_reference": "dpdk-examples-19.11.8-2.7.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-examples-19.11.8-2.7.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le"
},
"product_reference": "dpdk-examples-19.11.8-2.7.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-examples-19.11.8-2.7.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x"
},
"product_reference": "dpdk-examples-19.11.8-2.7.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-examples-19.11.8-2.7.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64"
},
"product_reference": "dpdk-examples-19.11.8-2.7.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64"
},
"product_reference": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le"
},
"product_reference": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x"
},
"product_reference": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64"
},
"product_reference": "dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-tools-19.11.8-2.7.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64"
},
"product_reference": "dpdk-tools-19.11.8-2.7.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-tools-19.11.8-2.7.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le"
},
"product_reference": "dpdk-tools-19.11.8-2.7.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-tools-19.11.8-2.7.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x"
},
"product_reference": "dpdk-tools-19.11.8-2.7.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dpdk-tools-19.11.8-2.7.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64"
},
"product_reference": "dpdk-tools-19.11.8-2.7.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libdpdk-20_0-19.11.8-2.7.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64"
},
"product_reference": "libdpdk-20_0-19.11.8-2.7.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libdpdk-20_0-19.11.8-2.7.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le"
},
"product_reference": "libdpdk-20_0-19.11.8-2.7.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libdpdk-20_0-19.11.8-2.7.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x"
},
"product_reference": "libdpdk-20_0-19.11.8-2.7.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libdpdk-20_0-19.11.8-2.7.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64"
},
"product_reference": "libdpdk-20_0-19.11.8-2.7.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1059",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1059"
}
],
"notes": [
{
"category": "general",
"text": "The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1059",
"url": "https://www.suse.com/security/cve/CVE-2018-1059"
},
{
"category": "external",
"summary": "SUSE Bug 1089638 for CVE-2018-1059",
"url": "https://bugzilla.suse.com/1089638"
},
{
"category": "external",
"summary": "SUSE Bug 1090647 for CVE-2018-1059",
"url": "https://bugzilla.suse.com/1090647"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-1059"
},
{
"cve": "CVE-2019-14818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-14818"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhost_user socket, can send specially crafted VRING_SET_NUM messages, resulting in a memory leak including file descriptors. This flaw could lead to a denial of service condition.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-14818",
"url": "https://www.suse.com/security/cve/CVE-2019-14818"
},
{
"category": "external",
"summary": "SUSE Bug 1156146 for CVE-2019-14818",
"url": "https://bugzilla.suse.com/1156146"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-14818"
},
{
"cve": "CVE-2020-10722",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-10722"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-10722",
"url": "https://www.suse.com/security/cve/CVE-2020-10722"
},
{
"category": "external",
"summary": "SUSE Bug 1171477 for CVE-2020-10722",
"url": "https://bugzilla.suse.com/1171477"
},
{
"category": "external",
"summary": "SUSE Bug 1171930 for CVE-2020-10722",
"url": "https://bugzilla.suse.com/1171930"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-10722"
},
{
"cve": "CVE-2020-10725",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-10725"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vhost-user backend application running on the host, which could result in a loss of connectivity for the other guests running on that host. This is caused by a missing validity check of the descriptor address in the function `virtio_dev_rx_batch_packed()`.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-10725",
"url": "https://www.suse.com/security/cve/CVE-2020-10725"
},
{
"category": "external",
"summary": "SUSE Bug 1171477 for CVE-2020-10725",
"url": "https://bugzilla.suse.com/1171477"
},
{
"category": "external",
"summary": "SUSE Bug 1171927 for CVE-2020-10725",
"url": "https://bugzilla.suse.com/1171927"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-10725"
},
{
"cve": "CVE-2020-14374",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14374"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A flawed bounds checking in the copy_data function leads to a buffer overflow allowing an attacker in a virtual machine to write arbitrary data to any address in the vhost_crypto application. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14374",
"url": "https://www.suse.com/security/cve/CVE-2020-14374"
},
{
"category": "external",
"summary": "SUSE Bug 1176590 for CVE-2020-14374",
"url": "https://bugzilla.suse.com/1176590"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-14374"
},
{
"cve": "CVE-2020-14375",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14375"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. Virtio ring descriptors, and the data they describe are in a region of memory accessible by from both the virtual machine and the host. An attacker in a VM can change the contents of the memory after vhost_crypto has validated it. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14375",
"url": "https://www.suse.com/security/cve/CVE-2020-14375"
},
{
"category": "external",
"summary": "SUSE Bug 1176590 for CVE-2020-14375",
"url": "https://bugzilla.suse.com/1176590"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-14375"
},
{
"cve": "CVE-2020-14376",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14376"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A lack of bounds checking when copying iv_data from the VM guest memory into host memory can lead to a large buffer overflow. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14376",
"url": "https://www.suse.com/security/cve/CVE-2020-14376"
},
{
"category": "external",
"summary": "SUSE Bug 1176590 for CVE-2020-14376",
"url": "https://bugzilla.suse.com/1176590"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-14376"
},
{
"cve": "CVE-2020-14378",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14378"
}
],
"notes": [
{
"category": "general",
"text": "An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc` function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause `move_desc` to get stuck in a 4,294,967,295-count iteration loop. Depending on how `vhost_crypto` is being used this could prevent other VMs or network tasks from being serviced by the busy DPDK lcore for an extended period.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14378",
"url": "https://www.suse.com/security/cve/CVE-2020-14378"
},
{
"category": "external",
"summary": "SUSE Bug 1176590 for CVE-2020-14378",
"url": "https://bugzilla.suse.com/1176590"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-devel-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-doc-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-examples-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.s390x",
"openSUSE Tumbleweed:dpdk-kmp-default-19.11.8_k5.13.13_1-2.7.x86_64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:dpdk-tools-19.11.8-2.7.x86_64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.aarch64",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.ppc64le",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.s390x",
"openSUSE Tumbleweed:libdpdk-20_0-19.11.8-2.7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-14378"
}
]
}
fkie_cve-2018-1059
Vulnerability from fkie_nvd
Published
2018-04-24 18:29
Modified
2024-11-21 03:59
Severity ?
Summary
The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| canonical | ubuntu_linux | 17.10 | |
| canonical | ubuntu_linux | 18.04 | |
| redhat | ceph_storage | 3.0 | |
| redhat | enterprise_linux_fast_datapath | 7.0 | |
| redhat | openshift | 3.0 | |
| redhat | openstack | 8 | |
| redhat | openstack | 9 | |
| redhat | openstack | 10 | |
| redhat | openstack | 11 | |
| redhat | openstack | 12 | |
| redhat | virtualization | 4.0 | |
| redhat | virtualization | 4.1 | |
| redhat | virtualization_manager | 4.1 | |
| redhat | enterprise_linux | 7.0 | |
| dpdk | data_plane_development_kit | * |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
"matchCriteriaId": "9070C9D8-A14A-467F-8253-33B966C16886",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
"matchCriteriaId": "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:redhat:ceph_storage:3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "516F4E8E-ED2F-4282-9DAB-D8B378F61258",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:redhat:enterprise_linux_fast_datapath:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "559A4609-EC7E-40CD-9165-5DA68CBCEE9B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:redhat:openshift:3.0:*:*:*:enterprise:*:*:*",
"matchCriteriaId": "45690263-84D9-45A1-8C30-3ED2F0F11F47",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:*",
"matchCriteriaId": "E8B8C725-34CF-4340-BE7B-37E58CF706D6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*",
"matchCriteriaId": "F40C26BE-56CB-4022-A1D8-3CA0A8F87F4B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*",
"matchCriteriaId": "E722FEF7-58A6-47AD-B1D0-DB0B71B0C7AA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:redhat:openstack:11:*:*:*:*:*:*:*",
"matchCriteriaId": "4E9AF77C-5D49-4842-9817-AD710A919073",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:*",
"matchCriteriaId": "4D4AC996-B340-4A14-86F7-FF83B4D5EC8F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*",
"matchCriteriaId": "6BBD7A51-0590-4DDF-8249-5AFA8D645CB6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:redhat:virtualization:4.1:*:*:*:*:*:*:*",
"matchCriteriaId": "03EB0F63-DB24-4240-BC44-C92BAE7EAF42",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:redhat:virtualization_manager:4.1:*:*:*:*:*:*:*",
"matchCriteriaId": "AF786B57-02C3-48B7-B902-318356B3A3B6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "142AD0DD-4CF3-4D74-9442-459CE3347E3A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:dpdk:data_plane_development_kit:*:*:*:*:*:*:*:*",
"matchCriteriaId": "723DDE45-6CD8-4486-B742-FCFA0EA88873",
"versionEndExcluding": "18.02.1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable."
},
{
"lang": "es",
"value": "La interfaz vhost de usuario de DPDK no verifica que el rango f\u00edsico invitado solicitado est\u00e9 mapeado y sea contiguo al realizar traducciones de direcciones f\u00edsicas de invitado a direcciones virtuales del host. Esto podr\u00eda conducir a que un invitado malicioso exponga la memoria del proceso del backend del usuario vhost. Todas las versiones anteriores a la 18.02.1 son vulnerables."
}
],
"id": "CVE-2018-1059",
"lastModified": "2024-11-21T03:59:05.420",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "LOW",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.9,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 5.5,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "[email protected]",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"exploitabilityScore": 1.6,
"impactScore": 4.0,
"source": "[email protected]",
"type": "Primary"
}
]
},
"published": "2018-04-24T18:29:00.233",
"references": [
{
"source": "[email protected]",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1267"
},
{
"source": "[email protected]",
"url": "https://access.redhat.com/errata/RHSA-2018:2038"
},
{
"source": "[email protected]",
"url": "https://access.redhat.com/errata/RHSA-2018:2102"
},
{
"source": "[email protected]",
"url": "https://access.redhat.com/errata/RHSA-2018:2524"
},
{
"source": "[email protected]",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/security/cve/cve-2018-1059"
},
{
"source": "[email protected]",
"tags": [
"Issue Tracking",
"Third Party Advisory"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"source": "[email protected]",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/3642-1/"
},
{
"source": "[email protected]",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/3642-2/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1267"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://access.redhat.com/errata/RHSA-2018:2038"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://access.redhat.com/errata/RHSA-2018:2102"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://access.redhat.com/errata/RHSA-2018:2524"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/security/cve/cve-2018-1059"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Issue Tracking",
"Third Party Advisory"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544298"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/3642-1/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/3642-2/"
}
],
"sourceIdentifier": "[email protected]",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-200"
}
],
"source": "[email protected]",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-200"
}
],
"source": "[email protected]",
"type": "Primary"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…