CVE-2018-1059: Infoleak
Last updated 18 August 2025
Other sources
The DPDK vhost-user interface does not check all the requested guest physical range is mapped and contiguous when performing Guest Physical Adresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory.
— Red Hat
The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable.
— Launchpad
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-1059?
CVE-2018-1059 is a vulnerability in the DPDK vhost-user interface that could allow a malicious guest to expose vhost-user backend process memory.
Is there a fix for CVE-2018-1059?
Yes, there are patches available to fix the CVE-2018-1059 vulnerability.
Which versions of DPDK are affected by CVE-2018-1059?
All versions of DPDK before 16.11.6, 17.08.2, 17.11.2, and 18.02.1 are affected by CVE-2018-1059.
What is the severity level of CVE-2018-1059?
The severity level of CVE-2018-1059 is medium, with a CVSS severity score of 6.1.
Where can I find more information about CVE-2018-1059?
You can find more information about CVE-2018-1059 on the Red Hat website in the provided references.