Information disclosure in Red Hat DPDK
Priority LOW 29CWE-200Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Partial Red Hat: 8 fixed, 9 without a fix
Attack profile from CVSS 3.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-200.
Summary
The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable.
Why it matters now
EPSS 0.0079 56th percentileScored 2026-11-07
Fix Partial Red Hat: 4 advisoriesRed Hat: 8 fixed, 9 without a fix
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Red Hat | DPDK | before 18.02.1 | 18.02.1 | Patch available | CNA |
- DPDK VendorRed Hat Affected before 18.02.1 Fixed in 18.02.1 Patch available CNA
CPE configurations NVD · 15
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:* | 17.10 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* | 18.04 | Vulnerable | Canonical |
| cpe:2.3:a:redhat:ceph_storage:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:enterprise_linux_fast_datapath:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:openshift:3.0:*:*:*:enterprise:*:*:* | 3.0 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:* | 8 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:* | 9 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:* | 10 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:openstack:11:*:*:*:*:*:*:* | 11 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:* | 12 | Vulnerable | Red Hat |
- cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:* Versions 17.10 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* Versions 18.04 Vulnerable ·Canonical
- cpe:2.3:a:redhat:ceph_storage:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:enterprise_linux_fast_datapath:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:openshift:3.0:*:*:*:enterprise:*:*:* Versions 3.0 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:* Versions 8 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:* Versions 9 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:* Versions 10 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:openstack:11:*:*:*:*:*:*:* Versions 11 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:* Versions 12 Vulnerable ·Red Hat
Show 5 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:virtualization:4.1:*:*:*:*:*:*:* | 4.1 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:virtualization_manager:4.1:*:*:*:*:*:*:* | 4.1 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:a:dpdk:data_plane_development_kit:*:*:*:*:*:*:*:* | before 18.02.1 | Vulnerable | DPDK |
- cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:virtualization:4.1:*:*:*:*:*:*:* Versions 4.1 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:virtualization_manager:4.1:*:*:*:*:*:*:* Versions 4.1 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:a:dpdk:data_plane_development_kit:*:*:*:*:*:*:*:* Versions before 18.02.1 Vulnerable ·DPDK
Remediation
Red Hat 4 advisories
- RHSA-2018:2524 Released 2018-08-20 · Red Hat rating Moderateopenvswitch security and bug fix update
- OpenStack 12.0 Tools for RHEL 7 openvswitch-test-2.9.0-19.el7fdp.1
- Red Hat OpenStack Platform 12.0 openvswitch-2.9.0-19.el7fdp.1, openvswitch-ovn-central-2.9.0-19.el7fdp.1, openvswitch-ovn-common-2.9.0-19.el7fdp.1 +3
- RHSA-2018:2102 Released 2018-06-28 · Red Hat rating ModerateRed Hat OpenStack Platform 10 Security, Bug Fix, and Enhancement Advisory
- OpenStack 10.0 Tools for RHEL 7 openvswitch-test-2.9.0-19.el7fdp.1
- Red Hat OpenStack Platform 10.0 openstack-selinux-0.8.14-5.el7ost, openvswitch-2.9.0-19.el7fdp.1, openvswitch-devel-2.9.0-19.el7fdp.1 +5
- RHSA-2018:2038 Released 2018-06-26 · Red Hat rating Moderatedpdk security, bug fix and enhancement update
- Red Hat Enterprise Linux 7 Extras dpdk-17.11-11.el7, dpdk-devel-17.11-11.el7, dpdk-doc-17.11-11.el7 +1
Show 1 more Red Hat advisories
- RHSA-2018:1267 Released 2018-04-30 · Red Hat rating Moderateopenvswitch security and bug fix update
- Fast Datapath for Red Hat Enterprise Linux 7 openvswitch-2.9.0-19.el7fdp, openvswitch-devel-2.9.0-19.el7fdp, openvswitch-ovn-central-2.9.0-19.el7fdp +5
- Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts openvswitch-2.9.0-19.el7fdp, openvswitch-devel-2.9.0-19.el7fdp, openvswitch-ovn-common-2.9.0-19.el7fdp +2
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Fast Datapath for RHEL 7 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux 9 | Affected | No fix yet |
| Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) | Affected | No fix planned: Will not fix |
| Red Hat OpenShift Enterprise 3 | Affected | No fix planned: Will not fix |
| Red Hat OpenStack Platform 10 (Newton) | Affected | No fix yet |
| Red Hat OpenStack Platform 11 (Ocata) | Affected | No fix planned: Will not fix |
| Red Hat OpenStack Platform 13 (Queens) | Affected | No fix yet |
| Red Hat OpenStack Platform 8 (Liberty) | Affected | No fix planned: Will not fix |
| Red Hat OpenStack Platform 9 (Mitaka) | Affected | No fix planned: Will not fix |
| Fast Datapath for Red Hat Enterprise Linux 7 | Fixed | RHSA-2018:1267 |
| OpenStack 10.0 Tools for RHEL 7 | Fixed | RHSA-2018:2102 |
| OpenStack 12.0 Tools for RHEL 7 | Fixed | RHSA-2018:2524 |
| RHV-M 4.2 | Fixed | — |
| Red Hat Enterprise Linux 7 Extras | Fixed | RHSA-2018:2038 |
| Red Hat OpenStack Platform 10.0 | Fixed | RHSA-2018:2102 |
| Red Hat OpenStack Platform 12.0 | Fixed | RHSA-2018:2524 |
| Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts | Fixed | RHSA-2018:1267 |
Not affected: 2 products
- Red Hat Ceph Storage 3
- Red Hat Enterprise Linux 8
Timeline
- 2026-10-02 Threatist record created from CVE-2018-1059
- 2026-10-03 Alias added: GHSA-ww8j-hjq3-7m8r
References
More Red Hat Ceph Storage vulnerabilities
- TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
- TI-2018-11213 Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass… CVSS 3.0CRITICAL 9.8
- TI-2022-09605 An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. CVSS 3.1CRITICAL 9.8
- TI-2025-13566 Nodemailer: nodemailer: denial of service via crafted email address header CVSS 3.1HIGH 7.5
- TI-2026-28834 jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers CVSS 4.0MEDIUM 6.9
- TI-2023-26623 The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6… CVSS 3.1MEDIUM 5.9
Sources
- CVE-2018-1059 · CVE Program
- CVE-2018-1059 · NVD
- FIRST EPSS
- GHSA-ww8j-hjq3-7m8r · GitHub Advisory Database · CC BY 4.0
- CVE-2018-1059 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences