Information Disclosure

2019-01-1509:21:55

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

51.7%

JSON

dpdk is vulnerable to information disclosure. A malicious guest is able to expose the memory of vhost-user backend process memory. This is due to lack of verification for all requested guest physical ranges be mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations.

CPENameOperatorVersion
openvswitcheq2.4.1__2.git20160727.el7ost
openvswitcheq2.4.1__1.git20160727.el7_2
openvswitcheq2.7.3__2.git20171010.el7fdp
openvswitcheq2.9.0__1.el7fdp
openvswitcheq2.7.2__1.git20170719.el7fdp
openvswitcheq2.4.0__2.el7
openvswitcheq2.5.0__5.git20160628.el7fdb
openvswitcheq2.6.1__16.git20161206.el7ost
openvswitcheq2.6.1__10.1.git20161206.el7
openvswitcheq2.6.1__10.git20161206.el7fdp

Name	Operator	Version
openvswitch	eq	2.4.1__2.git20160727.el7ost
openvswitch	eq	2.4.1__1.git20160727.el7_2
openvswitch	eq	2.7.3__2.git20171010.el7fdp
openvswitch	eq	2.9.0__1.el7fdp
openvswitch	eq	2.7.2__1.git20170719.el7fdp
openvswitch	eq	2.4.0__2.el7
openvswitch	eq	2.5.0__5.git20160628.el7fdb
openvswitch	eq	2.6.1__16.git20161206.el7ost
openvswitch	eq	2.6.1__10.1.git20161206.el7
openvswitch	eq	2.6.1__10.git20161206.el7fdp