Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2024 and is owned by Tenable, Inc. or an Affiliate thereof.REDHAT-RHSA-2024-2135.NASL
HistoryApr 30, 2024 - 12:00 a.m.

RHEL 9 : qemu-kvm (RHSA-2024:2135)

2024-04-3000:00:00
This script is Copyright (C) 2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
9
redhat enterprise linux 9
qemu-kvm
vulnerabilities
e1000e nic
denial of service
vnc server
infinite loop
authenticated client
division by zero
scsi_disk_reset
arbitrary disk offset
null pointer dereference

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.3%

JSON

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2135 advisory.

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of     architectures. The qemu-kvm packages provide the user-space component for running virtual machines that     use KVM.

Security Fix(es):

* QEMU: e1000e: heap use-after-free in e1000e_write_packet_to_guest() (CVE-2023-3019)

* QEMU: VNC: infinite loop in inflate_buffer() leads to denial of service (CVE-2023-3255)

* QEMU: improper IDE controller reset can lead to MBR overwrite (CVE-2023-5088)

* QEMU: VNC: NULL pointer dereference in qemu_clipboard_request() (CVE-2023-6683)

* QEMU: am53c974: denial of service due to division by zero (CVE-2023-42467)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application’s self-reported version number.

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Red Hat Security Advisory RHSA-2024:2135. The text
# itself is copyright (C) Red Hat, Inc.
##

include('compat.inc');

if (description)
{
  script_id(194756);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2024/06/04");

  script_cve_id(
    "CVE-2023-3019",
    "CVE-2023-3255",
    "CVE-2023-5088",
    "CVE-2023-6683",
    "CVE-2023-42467"
  );
  script_xref(name:"RHSA", value:"2024:2135");

  script_name(english:"RHEL 9 : qemu-kvm (RHSA-2024:2135)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Red Hat host is missing one or more security updates for qemu-kvm.");
  script_set_attribute(attribute:"description", value:
"The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as
referenced in the RHSA-2024:2135 advisory.

    Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of
    architectures. The qemu-kvm packages provide the user-space component for running virtual machines that
    use KVM.

    Security Fix(es):

    * QEMU: e1000e: heap use-after-free in e1000e_write_packet_to_guest() (CVE-2023-3019)

    * QEMU: VNC: infinite loop in inflate_buffer() leads to denial of service (CVE-2023-3255)

    * QEMU: improper IDE controller reset can lead to MBR overwrite (CVE-2023-5088)

    * QEMU: VNC: NULL pointer dereference in qemu_clipboard_request() (CVE-2023-6683)

    * QEMU: am53c974: denial of service due to division by zero (CVE-2023-42467)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and
    other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes
    linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  # https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?d922e0bf");
  # https://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_2135.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?f0a76bcb");
  script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/errata/RHSA-2024:2135");
  script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/updates/classification/#moderate");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2218486");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2222351");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2238291");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2247283");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2254825");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-11219");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-12991");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-14111");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-15394");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-15965");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-16581");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-16686");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-1676");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-17067");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-17068");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-1708");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-17168");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-17209");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-17369");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-1761");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-18212");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-19010");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-19117");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-19119");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-19738");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-20764");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-21057");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-21293");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-21570");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-21705");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-24045");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-24593");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-24614");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-24988");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-26049");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-3922");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-3934");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-5324");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-6101");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-7098");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-7115");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-7135");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-7356");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-7360");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-7361");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-7414");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-7478");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-7526");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-7527");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-7561");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-7565");
  script_set_attribute(attribute:"see_also", value:"https://issues.redhat.com/browse/RHEL-832");
  script_set_attribute(attribute:"solution", value:
"Update the RHEL qemu-kvm package based on the guidance in RHSA-2024:2135.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:H/Au:S/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2023-5088");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");
  script_cwe_id(369, 416, 476, 821, 835);
  script_set_attribute(attribute:"vendor_severity", value:"Moderate");

  script_set_attribute(attribute:"vuln_publication_date", value:"2023/07/24");
  script_set_attribute(attribute:"patch_publication_date", value:"2024/04/30");
  script_set_attribute(attribute:"plugin_publication_date", value:"2024/04/30");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:9");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qemu-guest-agent");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qemu-img");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qemu-kvm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qemu-kvm-audio-pa");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qemu-kvm-block-blkio");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qemu-kvm-block-curl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qemu-kvm-block-rbd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qemu-kvm-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qemu-kvm-core");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qemu-kvm-device-display-virtio-gpu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qemu-kvm-device-display-virtio-gpu-ccw");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qemu-kvm-device-display-virtio-gpu-pci");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qemu-kvm-device-display-virtio-vga");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qemu-kvm-device-usb-host");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qemu-kvm-device-usb-redirect");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qemu-kvm-docs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qemu-kvm-tools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qemu-kvm-ui-egl-headless");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qemu-kvm-ui-opengl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qemu-pr-helper");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Red Hat Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2024 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl", "redhat_repos.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/cpu");

  exit(0);
}


include('rpm.inc');
include('rhel.inc');

if (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_release = get_kb_item('Host/RedHat/release');
if (isnull(os_release) || 'Red Hat' >!< os_release) audit(AUDIT_OS_NOT, 'Red Hat');
var os_ver = pregmatch(pattern: "Red Hat Enterprise Linux.*release ([0-9]+(\.[0-9]+)?)", string:os_release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, 'Red Hat');
os_ver = os_ver[1];
if (!rhel_check_release(operator: 'ge', os_version: os_ver, rhel_version: '9')) audit(AUDIT_OS_NOT, 'Red Hat 9.x', 'Red Hat ' + os_ver);

if (!get_kb_item('Host/RedHat/rpm-list')) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 's390' >!< cpu && 'aarch64' >!< cpu && 'ppc' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Red Hat', cpu);

var constraints = [
  {
    'repo_relative_urls': [
      'content/dist/rhel9/9.1/aarch64/appstream/debug',
      'content/dist/rhel9/9.1/aarch64/appstream/os',
      'content/dist/rhel9/9.1/aarch64/appstream/source/SRPMS',
      'content/dist/rhel9/9.1/s390x/appstream/debug',
      'content/dist/rhel9/9.1/s390x/appstream/os',
      'content/dist/rhel9/9.1/s390x/appstream/source/SRPMS',
      'content/dist/rhel9/9.1/x86_64/appstream/debug',
      'content/dist/rhel9/9.1/x86_64/appstream/os',
      'content/dist/rhel9/9.1/x86_64/appstream/source/SRPMS',
      'content/dist/rhel9/9.2/aarch64/appstream/debug',
      'content/dist/rhel9/9.2/aarch64/appstream/os',
      'content/dist/rhel9/9.2/aarch64/appstream/source/SRPMS',
      'content/dist/rhel9/9.2/s390x/appstream/debug',
      'content/dist/rhel9/9.2/s390x/appstream/os',
      'content/dist/rhel9/9.2/s390x/appstream/source/SRPMS',
      'content/dist/rhel9/9.2/x86_64/appstream/debug',
      'content/dist/rhel9/9.2/x86_64/appstream/os',
      'content/dist/rhel9/9.2/x86_64/appstream/source/SRPMS',
      'content/dist/rhel9/9.3/aarch64/appstream/debug',
      'content/dist/rhel9/9.3/aarch64/appstream/os',
      'content/dist/rhel9/9.3/aarch64/appstream/source/SRPMS',
      'content/dist/rhel9/9.3/s390x/appstream/debug',
      'content/dist/rhel9/9.3/s390x/appstream/os',
      'content/dist/rhel9/9.3/s390x/appstream/source/SRPMS',
      'content/dist/rhel9/9.3/x86_64/appstream/debug',
      'content/dist/rhel9/9.3/x86_64/appstream/os',
      'content/dist/rhel9/9.3/x86_64/appstream/source/SRPMS',
      'content/dist/rhel9/9.4/aarch64/appstream/debug',
      'content/dist/rhel9/9.4/aarch64/appstream/os',
      'content/dist/rhel9/9.4/aarch64/appstream/source/SRPMS',
      'content/dist/rhel9/9.4/s390x/appstream/debug',
      'content/dist/rhel9/9.4/s390x/appstream/os',
      'content/dist/rhel9/9.4/s390x/appstream/source/SRPMS',
      'content/dist/rhel9/9.4/x86_64/appstream/debug',
      'content/dist/rhel9/9.4/x86_64/appstream/os',
      'content/dist/rhel9/9.4/x86_64/appstream/source/SRPMS',
      'content/dist/rhel9/9/aarch64/appstream/debug',
      'content/dist/rhel9/9/aarch64/appstream/os',
      'content/dist/rhel9/9/aarch64/appstream/source/SRPMS',
      'content/dist/rhel9/9/s390x/appstream/debug',
      'content/dist/rhel9/9/s390x/appstream/os',
      'content/dist/rhel9/9/s390x/appstream/source/SRPMS',
      'content/dist/rhel9/9/x86_64/appstream/debug',
      'content/dist/rhel9/9/x86_64/appstream/os',
      'content/dist/rhel9/9/x86_64/appstream/source/SRPMS'
    ],
    'pkgs': [
      {'reference':'qemu-guest-agent-8.2.0-11.el9_4', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-img-8.2.0-11.el9_4', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-8.2.0-11.el9_4', 'cpu':'aarch64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-8.2.0-11.el9_4', 'cpu':'s390x', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-8.2.0-11.el9_4', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-audio-pa-8.2.0-11.el9_4', 'cpu':'aarch64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-audio-pa-8.2.0-11.el9_4', 'cpu':'s390x', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-audio-pa-8.2.0-11.el9_4', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-block-blkio-8.2.0-11.el9_4', 'cpu':'aarch64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-block-blkio-8.2.0-11.el9_4', 'cpu':'s390x', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-block-blkio-8.2.0-11.el9_4', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-block-curl-8.2.0-11.el9_4', 'cpu':'aarch64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-block-curl-8.2.0-11.el9_4', 'cpu':'s390x', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-block-curl-8.2.0-11.el9_4', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-block-rbd-8.2.0-11.el9_4', 'cpu':'aarch64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-block-rbd-8.2.0-11.el9_4', 'cpu':'s390x', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-block-rbd-8.2.0-11.el9_4', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-common-8.2.0-11.el9_4', 'cpu':'aarch64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-common-8.2.0-11.el9_4', 'cpu':'s390x', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-common-8.2.0-11.el9_4', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-core-8.2.0-11.el9_4', 'cpu':'aarch64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-core-8.2.0-11.el9_4', 'cpu':'s390x', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-core-8.2.0-11.el9_4', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-device-display-virtio-gpu-8.2.0-11.el9_4', 'cpu':'aarch64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-device-display-virtio-gpu-8.2.0-11.el9_4', 'cpu':'s390x', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-device-display-virtio-gpu-8.2.0-11.el9_4', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-device-display-virtio-gpu-ccw-8.2.0-11.el9_4', 'cpu':'s390x', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-device-display-virtio-gpu-pci-8.2.0-11.el9_4', 'cpu':'aarch64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-device-display-virtio-gpu-pci-8.2.0-11.el9_4', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-device-display-virtio-vga-8.2.0-11.el9_4', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-device-usb-host-8.2.0-11.el9_4', 'cpu':'aarch64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-device-usb-host-8.2.0-11.el9_4', 'cpu':'s390x', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-device-usb-host-8.2.0-11.el9_4', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-device-usb-redirect-8.2.0-11.el9_4', 'cpu':'aarch64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-device-usb-redirect-8.2.0-11.el9_4', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-docs-8.2.0-11.el9_4', 'cpu':'aarch64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-docs-8.2.0-11.el9_4', 'cpu':'s390x', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-docs-8.2.0-11.el9_4', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-tools-8.2.0-11.el9_4', 'cpu':'aarch64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-tools-8.2.0-11.el9_4', 'cpu':'s390x', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-tools-8.2.0-11.el9_4', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-ui-egl-headless-8.2.0-11.el9_4', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-kvm-ui-opengl-8.2.0-11.el9_4', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-pr-helper-8.2.0-11.el9_4', 'cpu':'aarch64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-pr-helper-8.2.0-11.el9_4', 'cpu':'s390x', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'},
      {'reference':'qemu-pr-helper-8.2.0-11.el9_4', 'cpu':'x86_64', 'release':'9', 'rpm_spec_vers_cmp':TRUE, 'epoch':'17'}
    ]
  }
];

var applicable_repo_urls = rhel_determine_applicable_repository_urls(constraints:constraints);
if(applicable_repo_urls == RHEL_REPOS_NO_OVERLAP_MESSAGE) exit(0, RHEL_REPO_NOT_ENABLED);

var flag = 0;
foreach var constraint_array ( constraints ) {
  var repo_relative_urls = NULL;
  if (!empty_or_null(constraint_array['repo_relative_urls'])) repo_relative_urls = constraint_array['repo_relative_urls'];
  foreach var pkg ( constraint_array['pkgs'] ) {
    var reference = NULL;
    var _release = NULL;
    var sp = NULL;
    var _cpu = NULL;
    var el_string = NULL;
    var rpm_spec_vers_cmp = NULL;
    var epoch = NULL;
    var allowmaj = NULL;
    var exists_check = NULL;
    var cves = NULL;
    if (!empty_or_null(pkg['reference'])) reference = pkg['reference'];
    if (!empty_or_null(pkg['release'])) _release = 'RHEL' + pkg['release'];
    if (!empty_or_null(pkg['sp'])) sp = pkg['sp'];
    if (!empty_or_null(pkg['cpu'])) _cpu = pkg['cpu'];
    if (!empty_or_null(pkg['el_string'])) el_string = pkg['el_string'];
    if (!empty_or_null(pkg['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = pkg['rpm_spec_vers_cmp'];
    if (!empty_or_null(pkg['epoch'])) epoch = pkg['epoch'];
    if (!empty_or_null(pkg['allowmaj'])) allowmaj = pkg['allowmaj'];
    if (!empty_or_null(pkg['exists_check'])) exists_check = pkg['exists_check'];
    if (!empty_or_null(pkg['cves'])) cves = pkg['cves'];
    if (reference &&
        _release &&
        rhel_decide_repo_relative_url_check(required_repo_url_list:repo_relative_urls) &&
        (applicable_repo_urls || (!exists_check || rpm_exists(release:_release, rpm:exists_check))) &&
        rpm_check(release:_release, sp:sp, cpu:_cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj, cves:cves)) flag++;
  }
}

if (flag)
{
  var extra = NULL;
  if (isnull(applicable_repo_urls) || !applicable_repo_urls) extra = rpm_report_get() + redhat_report_repo_caveat();
  else extra = rpm_report_get();
  security_report_v4(
      port       : 0,
      severity   : SECURITY_WARNING,
      extra      : extra
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'qemu-guest-agent / qemu-img / qemu-kvm / qemu-kvm-audio-pa / etc');
}
VendorProductVersionCPE
redhatenterprise_linuxqemu-guest-agentp-cpe:/a:redhat:enterprise_linux:qemu-guest-agent
redhatenterprise_linuxqemu-kvm-device-display-virtio-gpu-pcip-cpe:/a:redhat:enterprise_linux:qemu-kvm-device-display-virtio-gpu-pci
redhatenterprise_linuxqemu-kvm-block-rbdp-cpe:/a:redhat:enterprise_linux:qemu-kvm-block-rbd
redhatenterprise_linuxqemu-imgp-cpe:/a:redhat:enterprise_linux:qemu-img
redhatenterprise_linuxqemu-kvm-device-display-virtio-vgap-cpe:/a:redhat:enterprise_linux:qemu-kvm-device-display-virtio-vga
redhatenterprise_linuxqemu-kvmp-cpe:/a:redhat:enterprise_linux:qemu-kvm
redhatenterprise_linuxqemu-kvm-device-usb-redirectp-cpe:/a:redhat:enterprise_linux:qemu-kvm-device-usb-redirect
redhatenterprise_linuxqemu-kvm-block-curlp-cpe:/a:redhat:enterprise_linux:qemu-kvm-block-curl
redhatenterprise_linuxqemu-kvm-device-usb-hostp-cpe:/a:redhat:enterprise_linux:qemu-kvm-device-usb-host
redhatenterprise_linuxqemu-pr-helperp-cpe:/a:redhat:enterprise_linux:qemu-pr-helper
Rows per page:
1-10 of 211

References

Related

rocky 1
redhat 6
oraclelinux 6
nessus 33
osv 10
almalinux 1
redhatcve 5
prion 5
veracode 5
nvd 5
debiancve 5
ubuntucve 5
cvelist 5
cbl_mariner 2
cve 5
openvas 13
alpinelinux 3
amazon 1
redos 3
ubuntu 2
debian 1
fedora 1
rocky
rocky
qemu-kvm security update
2024-05-10 14:32:42
redhat
redhat
(RHSA-2024:2135) Moderate: qemu-kvm security update
2024-04-30 06:14:50
(RHSA-2024:2962) Moderate: virt:rhel and virt-devel:rhel security and enhancement update
2024-05-22 06:35:12
(RHSA-2024:0135) Moderate: virt:rhel and virt-devel:rhel security update
2024-01-10 09:31:57
oraclelinux
oraclelinux
qemu-kvm security update
2024-05-02 00:00:00
virt:ol and virt-devel:rhel security and enhancement update
2024-05-24 00:00:00
qemu-kvm security update
2024-06-03 00:00:00
nessus
nessus
Rocky Linux 9 : qemu-kvm (RLSA-2024:2135)
2024-05-14 00:00:00
Oracle Linux 9 : qemu-kvm (ELSA-2024-2135)
2024-05-06 00:00:00
RHEL 8 : virt:rhel and virt-devel:rhel (RHSA-2024:2962)
2024-05-23 00:00:00
osv
osv
Moderate: qemu-kvm security update
2024-05-10 14:32:42
Moderate: qemu-kvm security update
2024-04-30 00:00:00
CVE-2023-42467
2023-09-11 04:15:10
almalinux
almalinux
Moderate: qemu-kvm security update
2024-04-30 00:00:00
redhatcve
redhatcve
CVE-2023-42467
2023-09-12 13:54:17
CVE-2023-3255
2023-07-04 09:17:05
CVE-2023-6683
2024-01-12 19:01:05
prion
prion
Design/Logic Flaw
2023-09-11 04:15:00
Design/Logic Flaw
2023-09-13 17:15:00
Null pointer dereference
2024-01-12 19:15:00
veracode
veracode
Denial Of Service (DoS)
2023-10-09 14:34:20
NULL Pointer Dereference
2024-01-21 12:22:29
Denial Of Service (DoS)
2023-08-13 12:42:20
nvd
nvd
CVE-2023-42467
2023-09-11 04:15:10
CVE-2023-6683
2024-01-12 19:15:11
CVE-2023-3255
2023-09-13 17:15:09
debiancve
debiancve
CVE-2023-42467
2023-09-11 04:15:10
CVE-2023-6683
2024-01-12 19:15:11
CVE-2023-3255
2023-09-13 17:15:09
ubuntucve
ubuntucve
CVE-2023-42467
2023-09-11 00:00:00
CVE-2023-6683
2024-01-12 00:00:00
CVE-2023-3255
2023-09-13 00:00:00
cvelist
cvelist
CVE-2023-42467
2023-09-11 00:00:00
CVE-2023-6683 Qemu: vnc: null pointer dereference in qemu_clipboard_request()
2024-01-12 19:01:25
CVE-2023-5088 Qemu: improper ide controller reset can lead to mbr overwrite
2023-11-03 13:58:50
cbl_mariner
cbl_mariner
CVE-2023-42467 affecting package qemu for versions less than 8.2.0-1
2024-03-19 17:21:46
CVE-2023-3255 affecting package qemu for versions less than 8.2.0-1
2024-03-19 17:21:46
cve
cve
CVE-2023-42467
2023-09-11 04:15:10
CVE-2023-6683
2024-01-12 19:15:11
CVE-2023-5088
2023-11-03 14:15:08
openvas
openvas
openSUSE: Security Advisory for qemu (SUSE-SU-2024:1438-1)
2024-04-27 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:1394-1)
2024-05-07 00:00:00
Huawei EulerOS: Security Advisory for qemu (EulerOS-SA-2023-3064)
2023-10-31 00:00:00
alpinelinux
alpinelinux
CVE-2023-6683
2024-01-12 19:15:11
CVE-2023-5088
2023-11-03 14:15:08
CVE-2023-3019
2023-07-24 15:19:19
amazon
amazon
Medium: qemu
2023-11-09 19:19:00
redos
redos
ROS-20240401-01
2024-04-01 00:00:00
ROS-20240606-01
2024-06-06 00:00:00
ROS-20240329-15
2024-03-29 00:00:00
ubuntu
ubuntu
QEMU vulnerabilities
2024-01-08 00:00:00
QEMU regression
2024-06-06 00:00:00
debian
debian
[SECURITY] [DLA 3759-1] qemu security update
2024-03-11 17:27:27
fedora
fedora
[SECURITY] Fedora 38 Update: qemu-7.2.5-1.fc38
2023-08-29 01:35:27

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.3%

JSON
Related for REDHAT-RHSA-2024-2135.NASL
rocky1redhat6oraclelinux6nessus33osv10almalinux1redhatcve5prion5veracode5nvd5debiancve5ubuntucve5cvelist5cbl_mariner2cve5openvas13alpinelinux3amazon1redos3ubuntu2debian1fedora1