Debian dsa-5833：dpdk - 安全性更新
high Nessus Plugin ID 213102
語言:
概要
遠端 Debian 主機缺少安全性相關更新。說明
遠端 Debian 12 主機上安裝的多個套件受到 dsa-5833 公告中提及的一個弱點影響。- ------------------------------------------------- ------------------------------------ Debian 安全公告 DSA-5833-1 [email protected] https://www.debian.org/security/Moritz Muehlenhoff 2024 年 12 月 17 日 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
套件：dpdk CVE ID：CVE-2024-11614
在 DPDK (一組用於處理快速封包的程式庫) 的 vhost 程式碼中發現緩衝區溢位緩衝區溢位，可導致拒絕服務或惡意來賓/容器執行任意程式碼。
針對穩定的發行版本 (bookworm)，已在 22.11.7-1~deb12u1 版本中修正此問題。
建議您升級 dpdk 套件。
如需有關 dpdk 安全性狀態的詳細資訊，請參閱其安全追蹤頁面：
https://security-tracker.debian.org/tracker/dpdk
有關 Debian 安全公告、如何將這些更新套用至您的系統以及常見問題的詳細資訊，請參閱：https://www.debian.org/security/
郵寄清單：[email protected]
Tenable 已直接從 Debian 安全公告擷取前置描述區塊。
請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。
解決方案
升級 dpdk 套件。另請參閱
https://security-tracker.debian.org/tracker/source-package/dpdk
Plugin 詳細資訊
嚴重性: High
ID: 213102
檔案名稱: debian_DSA-5833.nasl
版本: 1.2
類型: local
代理程式: unix
已發布: 2024/12/17
已更新: 2024/12/19
支援的感應器: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Continuous Assessment, Nessus
風險資訊
VPR
風險因素: Medium
分數: 5.2
CVSS v2
風險因素: High
基本分數: 7.5
時間性分數: 5.5
媒介: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS 評分資料來源: CVE-2024-11614
CVSS v3
風險因素: High
基本分數: 7.4
時間性分數: 6.4
媒介: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
時間媒介: CVSS:3.0/E:U/RL:O/RC:C
弱點資訊
CPE: p-cpe:/a:debian:debian_linux:librte-net-ice23, p-cpe:/a:debian:debian_linux:librte-baseband-acc23, p-cpe:/a:debian:debian_linux:librte-raw-cnxk-gpio23, p-cpe:/a:debian:debian_linux:librte-net-cxgbe23, p-cpe:/a:debian:debian_linux:librte-bus-vdev23, p-cpe:/a:debian:debian_linux:librte-bus-ifpga23, p-cpe:/a:debian:debian_linux:librte-net-vmxnet3-23, p-cpe:/a:debian:debian_linux:librte-stack23, p-cpe:/a:debian:debian_linux:librte-dma-hisilicon23, p-cpe:/a:debian:debian_linux:librte-net-dpaa2-23, p-cpe:/a:debian:debian_linux:librte-cryptodev23, p-cpe:/a:debian:debian_linux:librte-regex-cn9k23, p-cpe:/a:debian:debian_linux:librte-net-ixgbe23, p-cpe:/a:debian:debian_linux:librte-security23, p-cpe:/a:debian:debian_linux:librte-net-e1000-23, p-cpe:/a:debian:debian_linux:librte-meta-compress, p-cpe:/a:debian:debian_linux:librte-common-octeontx23, p-cpe:/a:debian:debian_linux:libdpdk-dev, p-cpe:/a:debian:debian_linux:librte-ring23, p-cpe:/a:debian:debian_linux:librte-dma-skeleton23, p-cpe:/a:debian:debian_linux:librte-graph23, p-cpe:/a:debian:debian_linux:librte-dma-dpaa23, p-cpe:/a:debian:debian_linux:librte-net-softnic23, p-cpe:/a:debian:debian_linux:librte-cmdline23, p-cpe:/a:debian:debian_linux:librte-dma-dpaa2-23, p-cpe:/a:debian:debian_linux:librte-crypto-caam-jr23, p-cpe:/a:debian:debian_linux:librte-mbuf23, p-cpe:/a:debian:debian_linux:librte-net-liquidio23, p-cpe:/a:debian:debian_linux:librte-net-enetfec23, p-cpe:/a:debian:debian_linux:librte-port23, p-cpe:/a:debian:debian_linux:dpdk-dev, p-cpe:/a:debian:debian_linux:librte-jobstats23, p-cpe:/a:debian:debian_linux:librte-mempool-dpaa23, p-cpe:/a:debian:debian_linux:librte-net-i40e23, p-cpe:/a:debian:debian_linux:librte-mempool23, p-cpe:/a:debian:debian_linux:librte-crypto-scheduler23, p-cpe:/a:debian:debian_linux:librte-ethdev23, p-cpe:/a:debian:debian_linux:librte-net-idpf23, p-cpe:/a:debian:debian_linux:librte-net-enic23, p-cpe:/a:debian:debian_linux:librte-net-octeontx23, p-cpe:/a:debian:debian_linux:librte-event-dlb2-23, p-cpe:/a:debian:debian_linux:librte-net-ena23, p-cpe:/a:debian:debian_linux:librte-mempool-stack23, p-cpe:/a:debian:debian_linux:librte-ip-frag23, p-cpe:/a:debian:debian_linux:librte-net-igc23, p-cpe:/a:debian:debian_linux:librte-pcapng23, p-cpe:/a:debian:debian_linux:librte-gso23, p-cpe:/a:debian:debian_linux:librte-meta-raw, p-cpe:/a:debian:debian_linux:librte-table23, p-cpe:/a:debian:debian_linux:librte-net-mlx4-23, p-cpe:/a:debian:debian_linux:librte-gro23, p-cpe:/a:debian:debian_linux:librte-mempool-octeontx23, p-cpe:/a:debian:debian_linux:librte-net-ipn3ke23, p-cpe:/a:debian:debian_linux:dpdk-doc, p-cpe:/a:debian:debian_linux:librte-regexdev23, p-cpe:/a:debian:debian_linux:librte-crypto-bcmfs23, p-cpe:/a:debian:debian_linux:librte-pipeline23, p-cpe:/a:debian:debian_linux:librte-event-cnxk23, p-cpe:/a:debian:debian_linux:librte-net-txgbe23, p-cpe:/a:debian:debian_linux:librte-bitratestats23, p-cpe:/a:debian:debian_linux:librte-meta-allpmds, p-cpe:/a:debian:debian_linux:librte-net-fm10k23, p-cpe:/a:debian:debian_linux:librte-meta-net, p-cpe:/a:debian:debian_linux:librte-baseband-null23, p-cpe:/a:debian:debian_linux:librte-mempool-bucket23, p-cpe:/a:debian:debian_linux:librte-net-gve23, p-cpe:/a:debian:debian_linux:librte-net-thunderx23, p-cpe:/a:debian:debian_linux:librte-bus-pci23, p-cpe:/a:debian:debian_linux:librte-common-idpf23, p-cpe:/a:debian:debian_linux:librte-eventdev23, p-cpe:/a:debian:debian_linux:librte-baseband-turbo-sw23, p-cpe:/a:debian:debian_linux:librte-event-dpaa2-23, p-cpe:/a:debian:debian_linux:librte-net-iavf23, p-cpe:/a:debian:debian_linux:librte-net-ngbe23, p-cpe:/a:debian:debian_linux:librte-event-skeleton23, p-cpe:/a:debian:debian_linux:librte-meta-crypto, p-cpe:/a:debian:debian_linux:librte-baseband-fpga-5gnr-fec23, p-cpe:/a:debian:debian_linux:librte-bus-vmbus23, p-cpe:/a:debian:debian_linux:librte-net-mlx5-23, p-cpe:/a:debian:debian_linux:librte-net-netvsc23, p-cpe:/a:debian:debian_linux:librte-rcu23, p-cpe:/a:debian:debian_linux:librte-common-qat23, p-cpe:/a:debian:debian_linux:librte-compressdev23, p-cpe:/a:debian:debian_linux:librte-crypto-dpaa2-sec23, p-cpe:/a:debian:debian_linux:librte-crypto-ipsec-mb23, p-cpe:/a:debian:debian_linux:librte-sched23, p-cpe:/a:debian:debian_linux:librte-crypto-nitrox23, p-cpe:/a:debian:debian_linux:librte-net-af-xdp23, p-cpe:/a:debian:debian_linux:librte-net-atlantic23, p-cpe:/a:debian:debian_linux:librte-dma-ioat23, p-cpe:/a:debian:debian_linux:librte-crypto-ccp23, p-cpe:/a:debian:debian_linux:librte-net-virtio23, p-cpe:/a:debian:debian_linux:librte-raw-ntb23, p-cpe:/a:debian:debian_linux:librte-common-dpaax23, p-cpe:/a:debian:debian_linux:librte-common-cpt23, p-cpe:/a:debian:debian_linux:librte-common-sfc-efx23, p-cpe:/a:debian:debian_linux:librte-regex-mlx5-23, p-cpe:/a:debian:debian_linux:librte-meter23, p-cpe:/a:debian:debian_linux:librte-net-pfe23, p-cpe:/a:debian:debian_linux:librte-timer23, p-cpe:/a:debian:debian_linux:librte-vdpa-sfc23, p-cpe:/a:debian:debian_linux:librte-raw-skeleton23, p-cpe:/a:debian:debian_linux:librte-net-nfp23, p-cpe:/a:debian:debian_linux:librte-acl23, p-cpe:/a:debian:debian_linux:librte-dma-idxd23, p-cpe:/a:debian:debian_linux:librte-event-octeontx23, p-cpe:/a:debian:debian_linux:librte-net-ring23, p-cpe:/a:debian:debian_linux:librte-bpf23, p-cpe:/a:debian:debian_linux:librte-latencystats23, p-cpe:/a:debian:debian_linux:librte-net-tap23, p-cpe:/a:debian:debian_linux:librte-crypto-octeontx23, p-cpe:/a:debian:debian_linux:librte-net-bnxt23, p-cpe:/a:debian:debian_linux:librte-net-sfc23, p-cpe:/a:debian:debian_linux:librte-net-qede23, p-cpe:/a:debian:debian_linux:librte-net-cnxk23, p-cpe:/a:debian:debian_linux:librte-crypto-cnxk23, p-cpe:/a:debian:debian_linux:librte-meta-mempool, p-cpe:/a:debian:debian_linux:librte-compress-octeontx23, p-cpe:/a:debian:debian_linux:librte-net-axgbe23, p-cpe:/a:debian:debian_linux:librte-cfgfile23, p-cpe:/a:debian:debian_linux:librte-net-null23, p-cpe:/a:debian:debian_linux:librte-meta-bus, p-cpe:/a:debian:debian_linux:librte-bus-auxiliary23, p-cpe:/a:debian:debian_linux:librte-meta-all, p-cpe:/a:debian:debian_linux:librte-net-vdev-netvsc23, p-cpe:/a:debian:debian_linux:librte-net-bond23, p-cpe:/a:debian:debian_linux:librte-common-iavf23, p-cpe:/a:debian:debian_linux:librte-net-failsafe23, p-cpe:/a:debian:debian_linux:librte-baseband-la12xx23, p-cpe:/a:debian:debian_linux:librte-bus-dpaa23, p-cpe:/a:debian:debian_linux:librte-fib23, p-cpe:/a:debian:debian_linux:librte-kvargs23, p-cpe:/a:debian:debian_linux:librte-pci23, p-cpe:/a:debian:debian_linux:librte-telemetry23, p-cpe:/a:debian:debian_linux:librte-compress-mlx5-23, p-cpe:/a:debian:debian_linux:librte-efd23, p-cpe:/a:debian:debian_linux:librte-vdpa-ifc23, p-cpe:/a:debian:debian_linux:librte-gpudev23, p-cpe:/a:debian:debian_linux:librte-lpm23, p-cpe:/a:debian:debian_linux:librte-net-pcap23, p-cpe:/a:debian:debian_linux:librte-member23, p-cpe:/a:debian:debian_linux:librte-raw-cnxk-bphy23, p-cpe:/a:debian:debian_linux:librte-net-avp23, p-cpe:/a:debian:debian_linux:librte-eal23, p-cpe:/a:debian:debian_linux:librte-meta-dma, p-cpe:/a:debian:debian_linux:dpdk, p-cpe:/a:debian:debian_linux:librte-common-cnxk23, p-cpe:/a:debian:debian_linux:librte-distributor23, p-cpe:/a:debian:debian_linux:librte-crypto-mlx5-23, p-cpe:/a:debian:debian_linux:librte-event-dsw23, p-cpe:/a:debian:debian_linux:librte-ipsec23, p-cpe:/a:debian:debian_linux:librte-crypto-virtio23, p-cpe:/a:debian:debian_linux:librte-event-sw23, p-cpe:/a:debian:debian_linux:librte-meta-baseband, p-cpe:/a:debian:debian_linux:librte-net-memif23, p-cpe:/a:debian:debian_linux:librte-rawdev23, cpe:/o:debian:debian_linux:12.0, p-cpe:/a:debian:debian_linux:librte-meta-event, p-cpe:/a:debian:debian_linux:librte-compress-zlib23, p-cpe:/a:debian:debian_linux:librte-metrics23, p-cpe:/a:debian:debian_linux:librte-net-dpaa23, p-cpe:/a:debian:debian_linux:librte-power23, p-cpe:/a:debian:debian_linux:librte-net-octeon-ep23, p-cpe:/a:debian:debian_linux:librte-crypto-dpaa-sec23, p-cpe:/a:debian:debian_linux:librte-net-bnx2x23, p-cpe:/a:debian:debian_linux:librte-pdump23, p-cpe:/a:debian:debian_linux:librte-net23, p-cpe:/a:debian:debian_linux:librte-baseband-fpga-lte-fec23, p-cpe:/a:debian:debian_linux:librte-mempool-dpaa2-23, p-cpe:/a:debian:debian_linux:librte-bbdev23, p-cpe:/a:debian:debian_linux:librte-vdpa-mlx5-23, p-cpe:/a:debian:debian_linux:librte-node23, p-cpe:/a:debian:debian_linux:librte-net-ionic23, p-cpe:/a:debian:debian_linux:librte-dma-cnxk23, p-cpe:/a:debian:debian_linux:librte-mempool-ring23, p-cpe:/a:debian:debian_linux:librte-common-mlx5-23, p-cpe:/a:debian:debian_linux:librte-net-ark23, p-cpe:/a:debian:debian_linux:librte-net-hinic23, p-cpe:/a:debian:debian_linux:librte-net-hns3-23, p-cpe:/a:debian:debian_linux:librte-compress-isal23, p-cpe:/a:debian:debian_linux:librte-raw-ifpga23, p-cpe:/a:debian:debian_linux:librte-hash23, p-cpe:/a:debian:debian_linux:librte-rib23, p-cpe:/a:debian:debian_linux:librte-mempool-cnxk23, p-cpe:/a:debian:debian_linux:librte-net-enetc23, p-cpe:/a:debian:debian_linux:librte-meta-common, p-cpe:/a:debian:debian_linux:librte-crypto-null23, p-cpe:/a:debian:debian_linux:librte-net-vhost23, p-cpe:/a:debian:debian_linux:librte-event-opdl23, p-cpe:/a:debian:debian_linux:librte-reorder23, p-cpe:/a:debian:debian_linux:librte-vhost23, p-cpe:/a:debian:debian_linux:librte-raw-dpaa2-cmdif23, p-cpe:/a:debian:debian_linux:librte-net-af-packet23, p-cpe:/a:debian:debian_linux:librte-dmadev23, p-cpe:/a:debian:debian_linux:librte-crypto-openssl23, p-cpe:/a:debian:debian_linux:librte-bus-fslmc23, p-cpe:/a:debian:debian_linux:librte-event-dpaa23
必要的 KB 項目: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l
可輕鬆利用: No known exploits are available
修補程式發佈日期: 2024/12/17
弱點發布日期: 2024/12/17
參考資訊
CVE: CVE-2024-11614