ISOMAN

CVE

CVE-2018-1059

The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable.

Severity
MEDIUM
CVSS
6.1
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource

References

  1. https://access.redhat.com/errata/RHSA-2018:1267
  2. https://access.redhat.com/errata/RHSA-2018:2038
  3. https://access.redhat.com/errata/RHSA-2018:2102
  4. https://access.redhat.com/errata/RHSA-2018:2524
  5. https://access.redhat.com/security/cve/cve-2018-1059
  6. https://bugzilla.redhat.com/show_bug.cgi?id=1544298
  7. https://usn.ubuntu.com/3642-1/
  8. https://usn.ubuntu.com/3642-2/
  9. https://access.redhat.com/errata/RHSA-2018:1267
  10. https://access.redhat.com/errata/RHSA-2018:2038
  11. https://access.redhat.com/errata/RHSA-2018:2102
  12. https://access.redhat.com/errata/RHSA-2018:2524
  13. https://access.redhat.com/security/cve/cve-2018-1059
  14. https://bugzilla.redhat.com/show_bug.cgi?id=1544298
  15. https://usn.ubuntu.com/3642-1/
  16. https://usn.ubuntu.com/3642-2/