QEMU < 9.0.0 Multiple Vulnerabilities

The version of QEMU installed on the remote Windows host is prior to 9.0.0 and therefore vulnerable to the following: - A double free vulnerability was found in QEMU virtio devices virtio-gpu, virtio-serial-bus, virtio-crypto, where the memreentrancyguard flag insufficiently protects against DMA...

ROS-20240606-01

A vulnerability in QEMU's USB EHCI controller emulation is related to the lack of checks if the buffer pointer overlaps with the MMIO register when transmitting USB packets. the buffer pointer overlaps with the MMIO region when transmitting USB packets. Exploitation of the vulnerability could all...

Oracle Linux 9 : qemu-kvm (ELSA-2024-12407)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12407 advisory. - ui/clipboard: add asserts for update and request Fiona Ebner Orabug: 36323175 CVE-2023-6683 - ui/clipboard: mark type as not available when there is...

RHEL 8 : 8.3_qemu-kvm (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - QEMU: intel-hda: segmentation fault due to stack overflow CVE-2021-3611 Note that Nessus has not tested for this...

RHEL 8 : xen (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - QEMU: infinite loop in xhciringchainlength in hw/usb/hcd-xhci.c CVE-2020-14394 Note that Nessus has not tested for...

RHEL 7 : qemu-kvm-rhev (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - Qemu: ps2: information leakage via postload routine CVE-2017-16845 - QEMU aka Quick Emulator built with a...

RHEL 7 : kvm (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - Qemu: net: buffer overflow in MIPSnet emulator CVE-2016-4002 - Integer overflow in the VNC display driver...

RHEL 7 : 8.2_qemu-kvm (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - QEMU: e1000e: infinite loop scenario in case of null packet descriptor CVE-2020-28916 Note that Nessus has not test...

RHEL 8 : 8.1_libvirt (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libvirt: double free in qemuAgentGetInterfaces in qemuagent.c CVE-2020-25637 - An issue was discovered in...

RHEL 6 : qemu-kvm (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - QEMU: net: ignore packets with large size CVE-2018-17963 - Buffer overflow in the sendcontrolmsg function...

RHEL 5 : kvm (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - qemu: insufficient parameter validation during ram load CVE-2014-7840 - Qemu: net: buffer overflow in...

RHEL 7 : qemu-kvm-ma (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - QEMU: msix: OOB access during mmio operations may lead to DoS CVE-2020-13754 - The Virtio Vring...

RHEL 8 : qemu-kvm (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - QEMU: ppc64: sPAPR emulator leaks the host hardware identity CVE-2019-8934 - The ahcicommitbuf function i...

RHEL 8 : rhel_qemu-kvm (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - QEMU: virtiofsd: guest may open maximum file descriptor to cause DoS CVE-2020-10717 Note that Nessus has not tested...

RHEL 9 : xen (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - QEMU: infinite loop in xhciringchainlength in hw/usb/hcd-xhci.c CVE-2020-14394 Note that Nessus has not tested for...

RHEL 8 : av_qemu-kvm (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - QEMU: NULL pointer dereference in pciwrite in hw/acpi/pcihp.c CVE-2021-4158 - QEMU: am53c974: denial of...

RHEL 6 : qemu-kvm-rhev (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - Qemu: i386: leakage of stack memory to guest in kvmvapic.c CVE-2016-4020 - QEMU aka Quick Emulator built...

RHEL 8 : spice (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - QEMU: QXL: qxlphys2virt unsafe address translation can lead to out-of-bounds read CVE-2022-4144 Note that Nessus ha...

RHEL 7 : xen (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - Qemu: audio: host memory leakage via capture buffer CVE-2017-8309 - The qemu implementation in libvirt...

RHEL 8 : 8.2_qemu-kvm (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - QEMU: vhost-user-gpu: out-of-bounds write in virglcmdgetcapset CVE-2021-3546 - hw/net/e1000ecore.c in QEM...