Ubuntu Security Notice 3642-2 - USN-3642-1 fixed a vulnerability in DPDK. This update provides the corresponding update for Ubuntu 17.10. Maxime Coquelin discovered that DPDK incorrectly handled guest physical ranges. A malicious guest could use this issue to possibly access sensitive information. Various other issues were also addressed.
8fe532f8353f1e5421bd17706a5c37467d8b0cdab55cefe5959ae68270a446a3
==========================================================================
Ubuntu Security Notice USN-3642-2
May 16, 2018
dpdk vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 17.10
Summary:
DPDK could be made to expose sensitive information over the network.
Software Description:
- dpdk: set of libraries for fast packet processing
Details:
USN-3642-1 fixed a vulnerability in DPDK. This update provides the
corresponding update for Ubuntu 17.10.
Original advisory details:
Maxime Coquelin discovered that DPDK incorrectly handled guest physical
ranges. A malicious guest could use this issue to possibly access sensitive
information.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 17.10:
dpdk 17.05.2-0ubuntu1.1
In general, a standard system update will make all the necessary changes.
References:
https://usn.ubuntu.com/usn/usn-3642-2
https://usn.ubuntu.com/usn/usn-3642-1
CVE-2018-1059
Package Information:
https://launchpad.net/ubuntu/+source/dpdk/17.05.2-0ubuntu1.1