Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : QEMU vulnerabilities (USN-6567-1)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Ubuntu Security Notice USN-6567-1. The text
# itself is copyright (C) Canonical, Inc. See
# <https://ubuntu.com/security/notices>. Ubuntu(R) is a registered
# trademark of Canonical, Inc.
##

include('compat.inc');

if (description)
{
  script_id(187683);
  script_version("1.4");
  script_set_attribute(attribute:"plugin_modification_date", value:"2024/06/07");

  script_cve_id(
    "CVE-2020-14394",
    "CVE-2020-24165",
    "CVE-2021-3611",
    "CVE-2021-3638",
    "CVE-2023-1544",
    "CVE-2023-2861",
    "CVE-2023-3180",
    "CVE-2023-3255",
    "CVE-2023-3301",
    "CVE-2023-3354",
    "CVE-2023-4135",
    "CVE-2023-5088",
    "CVE-2023-40360",
    "CVE-2023-42467"
  );
  script_xref(name:"IAVB", value:"2023-B-0058-S");
  script_xref(name:"USN", value:"6567-1");
  script_xref(name:"IAVB", value:"2023-B-0073-S");
  script_xref(name:"IAVB", value:"2024-B-0022-S");

  script_name(english:"Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : QEMU vulnerabilities (USN-6567-1)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Ubuntu host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple
vulnerabilities as referenced in the USN-6567-1 advisory.

  - An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of
    the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process
    on the host, resulting in a denial of service. (CVE-2020-14394)

  - An issue was discovered in TCG Accelerator in QEMU 4.2.0, allows local attackers to execute arbitrary
    code, escalate privileges, and cause a denial of service (DoS). (CVE-2020-24165)

  - A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. A malicious
    guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service
    condition. The highest threat from this vulnerability is to system availability. This flaw affects QEMU
    versions prior to 7.0.0. (CVE-2021-3611)

  - An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in
    the ati_2d_blt() routine while handling MMIO write operations when the guest provides invalid values for
    the destination display parameters. A malicious guest could use this flaw to crash the QEMU process on the
    host, resulting in a denial of service. (CVE-2021-3638)

  - A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a
    crafted guest driver to allocate and initialize a huge number of page tables to be used as a ring of
    descriptors for CQ and async events, potentially leading to an out-of-bounds read and crash of QEMU.
    (CVE-2023-1544)

  - A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. The 9pfs server did not
    prohibit opening special files on the host side, potentially allowing a malicious client to escape from
    the exported 9p tree by creating and opening a device file in the shared folder. (CVE-2023-2861)

  - A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in
    virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in
    virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ.
    (CVE-2023-3180)

  - A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. A wrong exit
    condition may lead to an infinite loop when inflating an attacker controlled zlib buffer in the
    `inflate_buffer` function. This could allow a remote authenticated client who is able to send a clipboard
    to the VNC server to trigger a denial of service. (CVE-2023-3255)

  - A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device
    backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this
    time window to trigger an assertion and cause a denial of service. (CVE-2023-3301)

  - A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks
    whether the current number of connections crosses a certain threshold and if so, cleans up the previous
    connection. If the previous connection happens to be in the handshake phase and fails, QEMU cleans up the
    connection again, resulting in a NULL pointer dereference issue. This could allow a remote unauthenticated
    client to cause a denial of service. (CVE-2023-3354)

  - QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/ctrl.c because there is no
    check for whether an endurance group is configured before checking whether Flexible Data Placement is
    enabled. (CVE-2023-40360)

  - A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does
    not validate an offset provided by the guest before computing a host heap pointer, which is used for
    copying data back to the guest. Arbitrary heap memory relative to an allocated buffer can be disclosed.
    (CVE-2023-4135)

  - QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c because
    scsi_disk_emulate_mode_select does not prevent s->qdev.blocksize from being 256. This stops QEMU and the
    guest immediately. (CVE-2023-42467)

  - A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be
    targeted to offset 0 instead (potentially overwriting the VM's boot code). This could be used, for
    example, by L2 guests with a virtual disk (vdiskL2) stored on a virtual disk of an L1 (vdiskL1) hypervisor
    to read and/or write data to LBA 0 of vdiskL1, potentially gaining control of L1 at its next reboot.
    (CVE-2023-5088)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://ubuntu.com/security/notices/USN-6567-1");
  script_set_attribute(attribute:"solution", value:
"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2021-3638");
  script_set_attribute(attribute:"cvss3_score_source", value:"CVE-2020-24165");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2022/03/03");
  script_set_attribute(attribute:"patch_publication_date", value:"2024/01/08");
  script_set_attribute(attribute:"plugin_publication_date", value:"2024/01/08");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:20.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:22.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:23.04");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:23.10");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-block-extra");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-guest-agent");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-kvm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-system");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-system-arm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-system-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-system-data");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-system-gui");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-system-mips");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-system-misc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-system-ppc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-system-s390x");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-system-sparc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-system-x86");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-system-x86-microvm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-system-x86-xen");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-system-xen");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-user");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-user-binfmt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-user-static");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-utils");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Ubuntu Local Security Checks");

  script_copyright(english:"Ubuntu Security Notice (C) 2024 Canonical, Inc. / NASL script (C) 2024 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/cpu", "Host/Ubuntu", "Host/Ubuntu/release", "Host/Debian/dpkg-l");

  exit(0);
}

include('debian_package.inc');

if ( ! get_kb_item('Host/local_checks_enabled') ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_release = get_kb_item('Host/Ubuntu/release');
if ( isnull(os_release) ) audit(AUDIT_OS_NOT, 'Ubuntu');
os_release = chomp(os_release);
if (! ('20.04' >< os_release || '22.04' >< os_release || '23.04' >< os_release || '23.10' >< os_release)) audit(AUDIT_OS_NOT, 'Ubuntu 20.04 / 22.04 / 23.04 / 23.10', 'Ubuntu ' + os_release);
if ( ! get_kb_item('Host/Debian/dpkg-l') ) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 's390' >!< cpu && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Ubuntu', cpu);

var pkgs = [
    {'osver': '20.04', 'pkgname': 'qemu', 'pkgver': '1:4.2-3ubuntu6.28'},
    {'osver': '20.04', 'pkgname': 'qemu-block-extra', 'pkgver': '1:4.2-3ubuntu6.28'},
    {'osver': '20.04', 'pkgname': 'qemu-guest-agent', 'pkgver': '1:4.2-3ubuntu6.28'},
    {'osver': '20.04', 'pkgname': 'qemu-kvm', 'pkgver': '1:4.2-3ubuntu6.28'},
    {'osver': '20.04', 'pkgname': 'qemu-system', 'pkgver': '1:4.2-3ubuntu6.28'},
    {'osver': '20.04', 'pkgname': 'qemu-system-arm', 'pkgver': '1:4.2-3ubuntu6.28'},
    {'osver': '20.04', 'pkgname': 'qemu-system-common', 'pkgver': '1:4.2-3ubuntu6.28'},
    {'osver': '20.04', 'pkgname': 'qemu-system-data', 'pkgver': '1:4.2-3ubuntu6.28'},
    {'osver': '20.04', 'pkgname': 'qemu-system-gui', 'pkgver': '1:4.2-3ubuntu6.28'},
    {'osver': '20.04', 'pkgname': 'qemu-system-mips', 'pkgver': '1:4.2-3ubuntu6.28'},
    {'osver': '20.04', 'pkgname': 'qemu-system-misc', 'pkgver': '1:4.2-3ubuntu6.28'},
    {'osver': '20.04', 'pkgname': 'qemu-system-ppc', 'pkgver': '1:4.2-3ubuntu6.28'},
    {'osver': '20.04', 'pkgname': 'qemu-system-s390x', 'pkgver': '1:4.2-3ubuntu6.28'},
    {'osver': '20.04', 'pkgname': 'qemu-system-sparc', 'pkgver': '1:4.2-3ubuntu6.28'},
    {'osver': '20.04', 'pkgname': 'qemu-system-x86', 'pkgver': '1:4.2-3ubuntu6.28'},
    {'osver': '20.04', 'pkgname': 'qemu-system-x86-microvm', 'pkgver': '1:4.2-3ubuntu6.28'},
    {'osver': '20.04', 'pkgname': 'qemu-system-x86-xen', 'pkgver': '1:4.2-3ubuntu6.28'},
    {'osver': '20.04', 'pkgname': 'qemu-user', 'pkgver': '1:4.2-3ubuntu6.28'},
    {'osver': '20.04', 'pkgname': 'qemu-user-binfmt', 'pkgver': '1:4.2-3ubuntu6.28'},
    {'osver': '20.04', 'pkgname': 'qemu-user-static', 'pkgver': '1:4.2-3ubuntu6.28'},
    {'osver': '20.04', 'pkgname': 'qemu-utils', 'pkgver': '1:4.2-3ubuntu6.28'},
    {'osver': '22.04', 'pkgname': 'qemu', 'pkgver': '1:6.2+dfsg-2ubuntu6.16'},
    {'osver': '22.04', 'pkgname': 'qemu-block-extra', 'pkgver': '1:6.2+dfsg-2ubuntu6.16'},
    {'osver': '22.04', 'pkgname': 'qemu-guest-agent', 'pkgver': '1:6.2+dfsg-2ubuntu6.16'},
    {'osver': '22.04', 'pkgname': 'qemu-system', 'pkgver': '1:6.2+dfsg-2ubuntu6.16'},
    {'osver': '22.04', 'pkgname': 'qemu-system-arm', 'pkgver': '1:6.2+dfsg-2ubuntu6.16'},
    {'osver': '22.04', 'pkgname': 'qemu-system-common', 'pkgver': '1:6.2+dfsg-2ubuntu6.16'},
    {'osver': '22.04', 'pkgname': 'qemu-system-data', 'pkgver': '1:6.2+dfsg-2ubuntu6.16'},
    {'osver': '22.04', 'pkgname': 'qemu-system-gui', 'pkgver': '1:6.2+dfsg-2ubuntu6.16'},
    {'osver': '22.04', 'pkgname': 'qemu-system-mips', 'pkgver': '1:6.2+dfsg-2ubuntu6.16'},
    {'osver': '22.04', 'pkgname': 'qemu-system-misc', 'pkgver': '1:6.2+dfsg-2ubuntu6.16'},
    {'osver': '22.04', 'pkgname': 'qemu-system-ppc', 'pkgver': '1:6.2+dfsg-2ubuntu6.16'},
    {'osver': '22.04', 'pkgname': 'qemu-system-s390x', 'pkgver': '1:6.2+dfsg-2ubuntu6.16'},
    {'osver': '22.04', 'pkgname': 'qemu-system-sparc', 'pkgver': '1:6.2+dfsg-2ubuntu6.16'},
    {'osver': '22.04', 'pkgname': 'qemu-system-x86', 'pkgver': '1:6.2+dfsg-2ubuntu6.16'},
    {'osver': '22.04', 'pkgname': 'qemu-system-x86-microvm', 'pkgver': '1:6.2+dfsg-2ubuntu6.16'},
    {'osver': '22.04', 'pkgname': 'qemu-system-x86-xen', 'pkgver': '1:6.2+dfsg-2ubuntu6.16'},
    {'osver': '22.04', 'pkgname': 'qemu-user', 'pkgver': '1:6.2+dfsg-2ubuntu6.16'},
    {'osver': '22.04', 'pkgname': 'qemu-user-binfmt', 'pkgver': '1:6.2+dfsg-2ubuntu6.16'},
    {'osver': '22.04', 'pkgname': 'qemu-user-static', 'pkgver': '1:6.2+dfsg-2ubuntu6.16'},
    {'osver': '22.04', 'pkgname': 'qemu-utils', 'pkgver': '1:6.2+dfsg-2ubuntu6.16'},
    {'osver': '23.04', 'pkgname': 'qemu-block-extra', 'pkgver': '1:7.2+dfsg-5ubuntu2.4'},
    {'osver': '23.04', 'pkgname': 'qemu-guest-agent', 'pkgver': '1:7.2+dfsg-5ubuntu2.4'},
    {'osver': '23.04', 'pkgname': 'qemu-system', 'pkgver': '1:7.2+dfsg-5ubuntu2.4'},
    {'osver': '23.04', 'pkgname': 'qemu-system-arm', 'pkgver': '1:7.2+dfsg-5ubuntu2.4'},
    {'osver': '23.04', 'pkgname': 'qemu-system-common', 'pkgver': '1:7.2+dfsg-5ubuntu2.4'},
    {'osver': '23.04', 'pkgname': 'qemu-system-data', 'pkgver': '1:7.2+dfsg-5ubuntu2.4'},
    {'osver': '23.04', 'pkgname': 'qemu-system-gui', 'pkgver': '1:7.2+dfsg-5ubuntu2.4'},
    {'osver': '23.04', 'pkgname': 'qemu-system-mips', 'pkgver': '1:7.2+dfsg-5ubuntu2.4'},
    {'osver': '23.04', 'pkgname': 'qemu-system-misc', 'pkgver': '1:7.2+dfsg-5ubuntu2.4'},
    {'osver': '23.04', 'pkgname': 'qemu-system-ppc', 'pkgver': '1:7.2+dfsg-5ubuntu2.4'},
    {'osver': '23.04', 'pkgname': 'qemu-system-s390x', 'pkgver': '1:7.2+dfsg-5ubuntu2.4'},
    {'osver': '23.04', 'pkgname': 'qemu-system-sparc', 'pkgver': '1:7.2+dfsg-5ubuntu2.4'},
    {'osver': '23.04', 'pkgname': 'qemu-system-x86', 'pkgver': '1:7.2+dfsg-5ubuntu2.4'},
    {'osver': '23.04', 'pkgname': 'qemu-system-x86-xen', 'pkgver': '1:7.2+dfsg-5ubuntu2.4'},
    {'osver': '23.04', 'pkgname': 'qemu-system-xen', 'pkgver': '1:7.2+dfsg-5ubuntu2.4'},
    {'osver': '23.04', 'pkgname': 'qemu-user', 'pkgver': '1:7.2+dfsg-5ubuntu2.4'},
    {'osver': '23.04', 'pkgname': 'qemu-user-binfmt', 'pkgver': '1:7.2+dfsg-5ubuntu2.4'},
    {'osver': '23.04', 'pkgname': 'qemu-user-static', 'pkgver': '1:7.2+dfsg-5ubuntu2.4'},
    {'osver': '23.04', 'pkgname': 'qemu-utils', 'pkgver': '1:7.2+dfsg-5ubuntu2.4'},
    {'osver': '23.10', 'pkgname': 'qemu-block-extra', 'pkgver': '1:8.0.4+dfsg-1ubuntu3.23.10.2'},
    {'osver': '23.10', 'pkgname': 'qemu-guest-agent', 'pkgver': '1:8.0.4+dfsg-1ubuntu3.23.10.2'},
    {'osver': '23.10', 'pkgname': 'qemu-system', 'pkgver': '1:8.0.4+dfsg-1ubuntu3.23.10.2'},
    {'osver': '23.10', 'pkgname': 'qemu-system-arm', 'pkgver': '1:8.0.4+dfsg-1ubuntu3.23.10.2'},
    {'osver': '23.10', 'pkgname': 'qemu-system-common', 'pkgver': '1:8.0.4+dfsg-1ubuntu3.23.10.2'},
    {'osver': '23.10', 'pkgname': 'qemu-system-data', 'pkgver': '1:8.0.4+dfsg-1ubuntu3.23.10.2'},
    {'osver': '23.10', 'pkgname': 'qemu-system-gui', 'pkgver': '1:8.0.4+dfsg-1ubuntu3.23.10.2'},
    {'osver': '23.10', 'pkgname': 'qemu-system-mips', 'pkgver': '1:8.0.4+dfsg-1ubuntu3.23.10.2'},
    {'osver': '23.10', 'pkgname': 'qemu-system-misc', 'pkgver': '1:8.0.4+dfsg-1ubuntu3.23.10.2'},
    {'osver': '23.10', 'pkgname': 'qemu-system-ppc', 'pkgver': '1:8.0.4+dfsg-1ubuntu3.23.10.2'},
    {'osver': '23.10', 'pkgname': 'qemu-system-s390x', 'pkgver': '1:8.0.4+dfsg-1ubuntu3.23.10.2'},
    {'osver': '23.10', 'pkgname': 'qemu-system-sparc', 'pkgver': '1:8.0.4+dfsg-1ubuntu3.23.10.2'},
    {'osver': '23.10', 'pkgname': 'qemu-system-x86', 'pkgver': '1:8.0.4+dfsg-1ubuntu3.23.10.2'},
    {'osver': '23.10', 'pkgname': 'qemu-system-x86-xen', 'pkgver': '1:8.0.4+dfsg-1ubuntu3.23.10.2'},
    {'osver': '23.10', 'pkgname': 'qemu-system-xen', 'pkgver': '1:8.0.4+dfsg-1ubuntu3.23.10.2'},
    {'osver': '23.10', 'pkgname': 'qemu-user', 'pkgver': '1:8.0.4+dfsg-1ubuntu3.23.10.2'},
    {'osver': '23.10', 'pkgname': 'qemu-user-binfmt', 'pkgver': '1:8.0.4+dfsg-1ubuntu3.23.10.2'},
    {'osver': '23.10', 'pkgname': 'qemu-user-static', 'pkgver': '1:8.0.4+dfsg-1ubuntu3.23.10.2'},
    {'osver': '23.10', 'pkgname': 'qemu-utils', 'pkgver': '1:8.0.4+dfsg-1ubuntu3.23.10.2'}
];

var flag = 0;
foreach package_array ( pkgs ) {
  var osver = NULL;
  var pkgname = NULL;
  var pkgver = NULL;
  if (!empty_or_null(package_array['osver'])) osver = package_array['osver'];
  if (!empty_or_null(package_array['pkgname'])) pkgname = package_array['pkgname'];
  if (!empty_or_null(package_array['pkgver'])) pkgver = package_array['pkgver'];
  if (osver && pkgname && pkgver) {
    if (ubuntu_check(osver:osver, pkgname:pkgname, pkgver:pkgver)) flag++;
  }
}

if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_NOTE,
    extra      : ubuntu_report_get()
  );
  exit(0);
}
else
{
  var tested = ubuntu_pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'qemu / qemu-block-extra / qemu-guest-agent / qemu-kvm / qemu-system / etc');
}