usn-3642-1
Vulnerability from osv_ubuntu
Published
2018-05-09 11:46
Modified
2026-04-27 14:11
Summary
dpdk vulnerability
Details
Maxime Coquelin discovered that DPDK incorrectly handled guest physical ranges. A malicious guest could use this issue to possibly access sensitive information.
References
| URL | Type | |
|---|---|---|
{
"affected": [
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2018-1059",
"severity": [
{
"score": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:18.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "dpdk",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "dpdk-igb-uio-dkms",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "dpdk-rte-kni-dkms",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-acl17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-bitratestats17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-bus-pci17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-bus-vdev17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-cfgfile17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-cmdline17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-cryptodev17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-distributor17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-eal17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-efd17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-ethdev17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-eventdev17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-flow-classify17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-gro17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-gso17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-hash17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-ip-frag17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-jobstats17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-kni17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-kvargs17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-latencystats17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-lpm17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-mbuf17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-member17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-mempool-octeontx17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-mempool-ring17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-mempool-stack17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-mempool17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-meter17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-metrics17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-net17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pci17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pdump17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pipeline17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-af-packet17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-ark17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-avp17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-bnxt17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-bond17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-crypto-scheduler17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-cxgbe17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-e1000-17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-ena17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-enic17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-failsafe17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-fm10k17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-i40e17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-ixgbe17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-kni17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-lio17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-nfp17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-null-crypto17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-null17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-octeontx-ssovf17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-octeontx17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-pcap17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-qede17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-ring17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-sfc-efx17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-skeleton-event17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-softnic17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-sw-event17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-tap17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-thunderx-nicvf17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-vhost17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-virtio17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-pmd-vmxnet3-uio17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-port17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-power17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-reorder17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-ring17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-sched17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-security17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-table17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-timer17.11",
"binary_version": "17.11.2-1ubuntu0.1"
},
{
"binary_name": "librte-vhost17.11",
"binary_version": "17.11.2-1ubuntu0.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "dpdk",
"purl": "pkg:deb/ubuntu/dpdk@17.11.2-1ubuntu0.1?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "17.11.2-1ubuntu0.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"17.05.2-0ubuntu1",
"17.05.2-0ubuntu2",
"17.11-3",
"17.11-4",
"17.11-5",
"17.11.1-6"
]
}
],
"aliases": [],
"details": "Maxime Coquelin discovered that DPDK incorrectly handled guest physical\nranges. A malicious guest could use this issue to possibly access sensitive\ninformation.\n",
"id": "USN-3642-1",
"modified": "2026-04-27T14:11:23Z",
"published": "2018-05-09T11:46:29Z",
"references": [
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-3642-1"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-1059"
}
],
"related": [],
"schema_version": "1.7.0",
"summary": "dpdk vulnerability",
"upstream": [
"UBUNTU-CVE-2018-1059"
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…