Ubuntu 18.04 LTS:DPDK 回归 (USN-4189-2)

high Nessus 插件 ID 131313

简介

远程 Ubuntu 主机缺少安全更新。

描述

USN-4189-1 修复了 DPDK 中的漏洞。新版本引入了一个特定环境中的回归。此更新修复了该问题。

Jason Wang 发现 DPDK 未正确处理某些消息。
恶意容器中的攻击者可能利用此问题造成 DPDK 泄露资源,从而导致拒绝服务。

请注意,Tenable Network Security 已直接从 Ubuntu 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下,尽可能进行自动清理和排版。

解决方案

更新受影响的程序包。

另见

https://ubuntu.com/security/notices/USN-4189-2

插件详情

严重性: High

ID: 131313

文件名: ubuntu_USN-4189-2.nasl

版本: 1.5

类型: local

代理: unix

发布时间: 2019/11/26

最近更新时间: 2023/10/21

支持的传感器: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

漏洞信息

CPE: p-cpe:/a:canonical:ubuntu_linux:librte-gso17.11, p-cpe:/a:canonical:ubuntu_linux:librte-hash17.11, p-cpe:/a:canonical:ubuntu_linux:librte-ip-frag17.11, p-cpe:/a:canonical:ubuntu_linux:librte-jobstats17.11, p-cpe:/a:canonical:ubuntu_linux:librte-kni17.11, p-cpe:/a:canonical:ubuntu_linux:librte-kvargs17.11, p-cpe:/a:canonical:ubuntu_linux:librte-latencystats17.11, p-cpe:/a:canonical:ubuntu_linux:librte-lpm17.11, p-cpe:/a:canonical:ubuntu_linux:librte-mbuf17.11, p-cpe:/a:canonical:ubuntu_linux:librte-member17.11, p-cpe:/a:canonical:ubuntu_linux:librte-mempool-octeontx17.11, p-cpe:/a:canonical:ubuntu_linux:librte-mempool-ring17.11, p-cpe:/a:canonical:ubuntu_linux:librte-mempool-stack17.11, p-cpe:/a:canonical:ubuntu_linux:librte-mempool17.11, p-cpe:/a:canonical:ubuntu_linux:librte-meter17.11, p-cpe:/a:canonical:ubuntu_linux:librte-metrics17.11, p-cpe:/a:canonical:ubuntu_linux:librte-net17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pci17.11, p-cpe:/a:canonical:ubuntu_linux:dpdk, p-cpe:/a:canonical:ubuntu_linux:dpdk-dev, p-cpe:/a:canonical:ubuntu_linux:dpdk-igb-uio-dkms, p-cpe:/a:canonical:ubuntu_linux:dpdk-rte-kni-dkms, p-cpe:/a:canonical:ubuntu_linux:libdpdk-dev, p-cpe:/a:canonical:ubuntu_linux:librte-acl17.11, p-cpe:/a:canonical:ubuntu_linux:librte-bitratestats17.11, p-cpe:/a:canonical:ubuntu_linux:librte-bus-pci17.11, p-cpe:/a:canonical:ubuntu_linux:librte-bus-vdev17.11, p-cpe:/a:canonical:ubuntu_linux:librte-cfgfile17.11, p-cpe:/a:canonical:ubuntu_linux:librte-cmdline17.11, p-cpe:/a:canonical:ubuntu_linux:librte-cryptodev17.11, p-cpe:/a:canonical:ubuntu_linux:librte-distributor17.11, p-cpe:/a:canonical:ubuntu_linux:librte-eal17.11, p-cpe:/a:canonical:ubuntu_linux:librte-efd17.11, p-cpe:/a:canonical:ubuntu_linux:librte-ethdev17.11, p-cpe:/a:canonical:ubuntu_linux:librte-eventdev17.11, p-cpe:/a:canonical:ubuntu_linux:librte-flow-classify17.11, p-cpe:/a:canonical:ubuntu_linux:librte-gro17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-sfc-efx17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-skeleton-event17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-softnic17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-sw-event17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-tap17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-thunderx-nicvf17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-vhost17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-virtio17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-vmxnet3-uio17.11, p-cpe:/a:canonical:ubuntu_linux:librte-port17.11, p-cpe:/a:canonical:ubuntu_linux:librte-power17.11, p-cpe:/a:canonical:ubuntu_linux:librte-reorder17.11, p-cpe:/a:canonical:ubuntu_linux:librte-ring17.11, p-cpe:/a:canonical:ubuntu_linux:librte-sched17.11, p-cpe:/a:canonical:ubuntu_linux:librte-security17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pdump17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pipeline17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-af-packet17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-ark17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-avp17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-bnxt17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-bond17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-crypto-scheduler17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-cxgbe17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-e1000-17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-ena17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-enic17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-failsafe17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-fm10k17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-i40e17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-ixgbe17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-kni17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-lio17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-mlx4-17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-mlx5-17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-nfp17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-null-crypto17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-null17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-octeontx-ssovf17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-octeontx17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-pcap17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-qede17.11, p-cpe:/a:canonical:ubuntu_linux:librte-pmd-ring17.11, p-cpe:/a:canonical:ubuntu_linux:librte-table17.11, p-cpe:/a:canonical:ubuntu_linux:librte-timer17.11, p-cpe:/a:canonical:ubuntu_linux:librte-vhost17.11, cpe:/o:canonical:ubuntu_linux:18.04:-:lts

必需的 KB 项: Host/cpu, Host/Debian/dpkg-l, Host/Ubuntu, Host/Ubuntu/release

易利用性: No known exploits are available

补丁发布日期: 2019/11/25

漏洞发布日期: 2019/11/25

参考资料信息

USN: 4189-2