CVE:CVE-2018-1059
CNNVD:CNNVD-201804-1385
DPDK是一套开源的用于数据包快速处理的驱动程序。
DPDK 18.02.1之前版本中的vhost-user界面存在安全漏洞。攻击者可利用该漏洞泄露vhost-user后端进程内存。
solution:Upgrade canonical ubuntu_linux to a higher version than 17.10,18.04,and avoid the version 17.10,18.04; Upgrade redhat ceph_storage to a higher version than 3.0,and avoid the version 3.0; Upgrade redhat enterprise_linux_fast_datapath to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat openshift to a higher version than 3.0,and avoid the version 3.0; Upgrade redhat openstack to a higher version than 8,9,10,11,12,and avoid the version 8,9,10,11,12; Upgrade redhat virtualization to a higher version than 4.0,4.1,and avoid the version 4.0,4.1; Upgrade redhat virtualization_manager to a higher version than 4.1,and avoid the version 4.1; Upgrade redhat enterprise_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade dpdk data_plane_development_kit to a higher version than 18.02.1,and avoid the version (,18.02.1)