Rocky Linux 9 [CIQ] Security Update: qemu-guest-agent / qemu-guest-agent-debuginfo / qemu-img / etc Multiple Vulnerabilities (crlsa-2024_9136)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20249136 advisory. QEMU: SR-IOV: improper validation of NumVFs leads to buffer overflow CVE-2024-26327 QEMU: virtio: DMA reentrancy issue leads to double free vulnerability...

EulerOS Virtualization 2.11.1 : qemu (EulerOS-SA-2026-2426)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service DoS attack via improper synchronization during...

NewStart CGSL MAIN 6.06 (SP) : nbd Multiple Vulnerabilities (NS-SA-2026-0012)

The remote NewStart CGSL host, running version MAIN 6.06 SP, has nbd packages installed that are affected by multiple vulnerabilities: - In nbd-server in nbd before 3.24, there is a stack-based buffer overflow. An attacker can cause a buffer overflow in the parsing of the name field by sending a...

Oracle Linux 8 : virt:kvm_utils3 (ELSA-2026-50118)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50118 advisory. - Limit recursion in ri-records CVE-2021-3622 resolves: rhbz1976194 - Bounds check for block exceeding page length CVE-2021-3504 resolves: rhbz1950501...

MiracleLinux 8 : virt:rhel and virt-devel:rhel (AXSA:2024-8876:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8876:01 advisory. QEMU: virtio: DMA reentrancy issue leads to double free vulnerability CVE-2024-3446 QEMU: Denial of Service via Improper Synchronization in QEMU NBD...

MiracleLinux 9 : qemu-kvm-9.0.0-10.el9 (AXSA:2024-9100:07)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-9100:07 advisory. QEMU: SR-IOV: improper validation of NumVFs leads to buffer overflow CVE-2024-26327 QEMU: virtio: DMA reentrancy issue leads to double free...

EUVD-2013-6229

Malware in sbrugna...

EUVD-2011-0549

Malware in sbrugna...

EUVD-2017-6579

Malware in sbrugna...

EUVD-2015-0858

Malware in sbrugna...

EUVD-2011-1923

Malware in sbrugna...

EUVD-2024-48319

Malicious code in bioql PyPI...

EUVD-2024-48876

Malicious code in bioql PyPI...

Ubuntu 22.04 LTS / 24.04 LTS / 25.04 : QEMU vulnerabilities (USN-7744-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7744-1 advisory. It was discovered that QEMU incorrectly handled certain virtio devices. A privileged guest attacker could use this issue to cause QEM...

Qemu: denial of service via improper synchronization in qemu nbd server during socket closure

...

Linux Distros Unpatched Vulnerability : CVE-2022-26496

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In nbd-server in nbd before 3.24, there is a stack-based buffer overflow. An attacker can cause a buffer overflow in the parsing of the name field by sending a...

SUSE-SU-2025:02530-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2024-7409: Fixed denial of service via improper synchronization in QEMU NBD Server during socket closure bsc1229007...

Linux Distros Unpatched Vulnerability : CVE-2024-7409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service DoS attack via improper synchronization during socket closure when a clie...

Linux Distros Unpatched Vulnerability : CVE-2017-9524

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The qemu-nbd server in QEMU aka Quick Emulator, when built with the Network Block Device NBD Server support, allows remote attackers to cause a denial of servic...

Linux Distros Unpatched Vulnerability : CVE-2017-15118

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to...