dpdk-18.11.8-1.el7
エラータID: AXSA:2020-184:02
リリース日:
2020/07/01 Wednesday - 04:14
題名:
dpdk-18.11.8-1.el7
影響のあるチャネル:
Asianux Server 7 for x86_64
Severity:
Moderate
Description:
以下項目について対処しました。
[Security Fix]
- dpdk の vhost_user_set_log_base() には整数オーバーフローのチェックがなく、
これによってメモリマップが要求よりも小さくなり、メモリ破損を引き起こす
可能性のある脆弱性があります。(CVE-2020-10722)
- dpdk には、特定の状況下でペイロードのインデックス整数がコピーされ、uint16 に
切り捨てられることで範囲外のインデックスが作成され、メモリ破損を引き起こす
可能性がある脆弱性があります。(CVE-2020-10723)
一部 CVE の翻訳文は JVN からの引用になります。
http://jvndb.jvn.jp/
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2020-10722
A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.
A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.
CVE-2020-10723
A memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an integer truncation on the index of a payload. Under certain circumstances, the index (a UInt) is copied and truncated into a uint16, which can lead to out of bound indexing and possible memory corruption.
A memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an integer truncation on the index of a payload. Under certain circumstances, the index (a UInt) is copied and truncated into a uint16, which can lead to out of bound indexing and possible memory corruption.
追加情報:
N/A
ダウンロード:
SRPMS
- dpdk-18.11.8-1.el7.src.rpm
MD5: 5be758e149cc8f8fe0522c71ed0eb454
SHA-256: b5d1143be6918d1e747e58a0f8635cdeb8b386409cc4b6605e7197b16eba5939
Size: 10.92 MB
Asianux Server 7 for x86_64
- dpdk-18.11.8-1.el7.x86_64.rpm
MD5: b0af25c9e730ed9f50fe79a168f51d4f
SHA-256: 2c8ef1aed55feaf769e0f7a04bbe7980a277a6a06ec466f7396581e5639c4e38
Size: 1.71 MB - dpdk-devel-18.11.8-1.el7.x86_64.rpm
MD5: 81921e8cefb85e762cee78d33671334d
SHA-256: 9b56c84d843b34b5613ec6466040c4e3e1c0912b9013fcbf5886aedda4a53c7b
Size: 346.02 kB - dpdk-doc-18.11.8-1.el7.noarch.rpm
MD5: 1dc7970e47147efbf903a4997f52edc5
SHA-256: fa5db22674eccc7e24f6fe3e544a2ff98576d69d0d8ac059dc86855a28d07df6
Size: 8.09 MB - dpdk-tools-18.11.8-1.el7.x86_64.rpm
MD5: eeba14ab45e7819770b98a46fe08731d
SHA-256: dd52b64eaf3a6c562dd520d540e762ffdf501b30d3f97fcb4efd1ac33eb6ff07
Size: 45.62 kB