Ubuntu 18.04 LTS:DPDK 漏洞 (USN-4189-1)

high Nessus 插件 ID 131015

简介

远程 Ubuntu 主机缺少安全更新。

描述

Jason Wang 发现 DPDK 未正确处理某些消息。
恶意容器中的攻击者可能利用此问题造成 DPDK 泄露资源,从而导致拒绝服务。

请注意,Tenable Network Security 已直接从 Ubuntu 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下,尽可能进行自动清理和排版。

解决方案

更新受影响的程序包。

另见

https://ubuntu.com/security/notices/USN-4189-1

插件详情

严重性: High

ID: 131015

文件名: ubuntu_USN-4189-1.nasl

版本: 1.7

类型: local

代理: unix

发布时间: 2019/11/14

最近更新时间: 2023/10/20

支持的传感器: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

风险信息

VPR

风险因素: Low

分数: 3.6

CVSS v2

风险因素: Medium

基本分数: 5

时间分数: 3.7

矢量: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS 分数来源: CVE-2019-14818

CVSS v3

风险因素: High

基本分数: 7.5

时间分数: 6.5

矢量: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

时间矢量: CVSS:3.0/E:U/RL:O/RC:C

漏洞信息

CPE: p-cpe:/a:canonical:ubuntu_linux:dpdk, p-cpe:/a:canonical:ubuntu_linux:dpdk-dev, p-cpe:/a:canonical:ubuntu_linux:dpdk-igb-uio-dkms, p-cpe:/a:canonical:ubuntu_linux:dpdk-rte-kni-dkms, p-cpe:/a:canonical:ubuntu_linux:libdpdk-dev, p-cpe:/a:canonical:ubuntu_linux:librte-acl17.11, p-cpe:/a:canonical:ubuntu_linux:librte-bitratestats17.11, p-cpe:/a:canonical:ubuntu_linux:librte-bus-pci17.11, p-cpe:/a:canonical:ubuntu_linux:librte-bus-vdev17.11, p-cpe:/a:canonical:ubuntu_linux:librte-cfgfile17.11, p-cpe:/a:canonical:ubuntu_linux:librte-cmdline17.11, p-cpe:/a:canonical:ubuntu_linux:librte-cryptodev17.11, p-cpe:/a:canonical:ubuntu_linux:librte-distributor17.11, p-cpe:/a:canonical:ubuntu_linux:librte-eal17.11, p-cpe:/a:canonical:ubuntu_linux:librte-efd17.11, p-cpe:/a:canonical:ubuntu_linux:librte-ethdev17.11, p-cpe:/a:canonical:ubuntu_linux:librte-eventdev17.11, p-cpe:/a:canonical:ubuntu_linux:librte-flow-classify17.11, p-cpe:/a:canonical:ubuntu_linux:librte-gro17.11, p-cpe:/a:canonical:ubuntu_linux:librte-gso17.11, p-cpe:/a:canonical:ubuntu_linux:librte-hash17.11, p-cpe:/a:canonical:ubuntu_linux:librte-ip-frag17.11, p-cpe:/a:canonical:ubuntu_linux:librte-jobstats17.11, p-cpe:/a:canonical:ubuntu_linux:librte-kni17.11, p-cpe:/a:canonical:ubuntu_linux:librte-reorder17.11, p-cpe:/a:canonical:ubuntu_linux:librte-ring17.11, p-cpe:/a:canonical:ubuntu_linux:librte-sched17.11, p-cpe:/a:canonical:ubuntu_linux:librte-security17.11, p-cpe:/a:canonical:ubuntu_linux:librte-table17.11, p-cpe:/a:canonical:ubuntu_linux:librte-timer17.11, p-cpe:/a:canonical:ubuntu_linux:librte-vhost17.11, cpe:/o:canonical:ubuntu_linux:18.04:-:lts, p-cpe:/a:canonical:ubuntu_linux:librte-kvargs17.11, p-cpe:/a:canonical:ubuntu_linux:librte-latencystats17.11, p-cpe:/a:canonical:ubuntu_linux:librte-lpm17.11, p-cpe:/a:canonical:ubuntu_linux:librte-mbuf17.11, p-cpe:/a:canonical:ubuntu_linux:librte-member17.11, p-cpe:/a:canonical:ubuntu_linux:librte-mempool-octeontx17.11, p-cpe:/a:canonical:ubuntu_linux:librte-mempool-ring17.11, p-cpe:/a:canonical:ubuntu_linux:librte-mempool-stack17.11, p-cpe:/a:canonical:ubuntu_linux:librte-mempool17.11, p-cpe:/a:canonical:ubuntu_linux:librte-meter17.11, p-cpe:/a:canonical:ubuntu_linux:librte-metrics17.11, p-cpe:/a:canonical:ubuntu_linux:librte-net17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pci17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pdump17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pipeline17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-af-packet17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-ark17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-avp17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-bnxt17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-bond17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-crypto-scheduler17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-cxgbe17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-e1000-17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-ena17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-enic17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-failsafe17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-fm10k17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-i40e17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-ixgbe17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-kni17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-lio17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-mlx4-17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-mlx5-17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-nfp17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-null-crypto17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-null17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-octeontx-ssovf17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-octeontx17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-pcap17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-qede17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-ring17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-sfc-efx17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-skeleton-event17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-softnic17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-sw-event17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-tap17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-thunderx-nicvf17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-vhost17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-virtio17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-vmxnet3-uio17.11, p-cpe:/a:canonical:ubuntu_linux:librte-port17.11, p-cpe:/a:canonical:ubuntu_linux:librte-power17.11

必需的 KB 项: Host/cpu, Host/Debian/dpkg-l, Host/Ubuntu, Host/Ubuntu/release

易利用性: No known exploits are available

补丁发布日期: 2019/11/13

漏洞发布日期: 2019/11/14

参考资料信息

CVE: CVE-2019-14818

USN: 4189-1