p PatchFirst

SUSE-SU-2018:1492-1

SUSE-SU-2018:1492-1 · Security update for dpdk-thunderxdpdk

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update fixes the following issues: - CVE-2018-1059: The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable. (bsc#1089638).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • dpdk SUSE:Linux Enterprise Software Development Kit 12 SP3

    Affected ranges
    • ECOSYSTEM: < 16.11.6-8.4.2

    Update to 16.11.6-8.4.2

  • dpdk-thunderx SUSE:Linux Enterprise Software Development Kit 12 SP3

    Affected ranges
    • ECOSYSTEM: < 16.11.6-8.4.2

    Update to 16.11.6-8.4.2

  • dpdk SUSE:Linux Enterprise Server 12 SP3

    Affected ranges
    • ECOSYSTEM: < 16.11.6-8.4.2

    Update to 16.11.6-8.4.2

  • dpdk-thunderx SUSE:Linux Enterprise Server 12 SP3

    Affected ranges
    • ECOSYSTEM: < 16.11.6-8.4.2

    Update to 16.11.6-8.4.2

  • dpdk SUSE:Linux Enterprise Server for SAP Applications 12 SP3

    Affected ranges
    • ECOSYSTEM: < 16.11.6-8.4.2

    Update to 16.11.6-8.4.2

  • dpdk-thunderx SUSE:Linux Enterprise Server for SAP Applications 12 SP3

    Affected ranges
    • ECOSYSTEM: < 16.11.6-8.4.2

    Update to 16.11.6-8.4.2

Original sources

Check your server →