Lucene search
K

10 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2023-0664

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Windows installer via...

7.8CVSS6.6AI score0.00308EPSS
Exploits0References2
Rosalinux
Rosalinux
added 2025/01/28 6:56 p.m.23 views

Advisory ROSA-SA-2025-2641

Software: qemu 7.2.7 OS: ROSA-CHROME packageevrstring: qemu-7.2.7-1 CVE-ID: CVE-2023-3301 BDU-ID: 2024-04418 CVE-Crit: LOW CVE-DESC.: A vulnerability in the virtio-net interface of the QEMU hardware emulator is related to the asynchronous nature of the shutdown allowing a race scenario...

7.8CVSS8.8AI score0.01891EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2023/09/07 12:0 a.m.37 views

Oracle Linux 8 : virt:kvm_utils (ELSA-2023-12342)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12342 advisory. - qga/win32: Use rundll for VSS installation Konstantin Kostiuk Orabug: 35206108 CVE-2023-0664 - qga/win32: Remove change action from MSI installer...

7.8CVSS7AI score0.00308EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2023/08/29 12:0 a.m.23 views

Fedora 38 : qemu (2023-68df3f4b02)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-68df3f4b02 advisory. Rebase to qemu 7.2.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not test...

7.8CVSS6.8AI score0.01891EPSS
Exploits0References5
OSV
OSV
added 2023/08/06 11:5 a.m.5 views

OESA-2023-1473 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Windows installer via repair custom actions to...

7.8CVSS6.3AI score0.00376EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2023/06/02 12:0 a.m.69 views

Oracle Linux 7 : qemu (ELSA-2023-12368)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12368 advisory. - qga/win32: Use rundll for VSS installation Konstantin Kostiuk Orabug: 35206108 CVE-2023-0664 - qga/win32: Remove change action from MSI installer...

7.8CVSS7AI score0.00308EPSS
Exploits0References3
Circl
Circl
added 2023/03/30 12:15 a.m.8 views

CVE-2023-0664

creationtimestamp| type| source ---|---|--- 2023-03-30 00:15:58+00:00| seen| https://t.me/cibsecurity/61147 2025-02-18 21:38:56+00:00| seen| Telegram/L7dqcb9Se1MgDdwkpfs4QJdWP2wpLRNbdR-6yTEjDg0ckyH5...

7.8CVSS6.8AI score0.00308EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2023/03/30 12:0 a.m.20 views

Fedora: Security Advisory for qemu (FEDORA-2023-371519fd09)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.00308EPSS
Exploits0References2
NVD
NVD
added 2023/03/29 8:15 p.m.23 views

CVE-2023-0664

A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Windows installer via repair custom actions to elevate their privileges on the system...

7.8CVSS7.2AI score0.00308EPSS
Exploits0References7
CVE
CVE
added 2023/03/29 12:0 a.m.161 views

CVE-2023-0664

CVE-2023-0664 describes a local privilege-escalation flaw in the Windows component of the QEMU Guest Agent. An unprivileged user can abuse the QEMU Guest Agent’s Windows installer via repair custom actions to elevate privileges. The NVD score is 7.8 ( HIGH ); attack vector: LOCAL, no user interac...

7.8CVSS7.2AI score0.00308EPSS
Exploits0References7Affected Software1
Rows per page
Query Builder