CVE-2018-1059 vulnerability in Dpdk and Other Products
Published on April 24, 2018
The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable.
Weakness Type
What is an Information Disclosure Vulnerability?
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CVE-2018-1059 has been classified to as an Information Disclosure vulnerability or weakness.
Products Associated with CVE-2018-1059
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2018-1059 are published in these products:
Affected Versions
Red Hat, Inc. DPDK Version before 18.02.1 is affected by CVE-2018-1059Exploit Probability
EPSS
0.18%
Percentile
39.89%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.