A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or malicious actor.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - libguestfs: Buffer overflow in get_keys leads to DoS (CVE-2022-2211)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the guestfs- tools-1.48.2-5.el9 build changelog.

  - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number     of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or     malicious actor. (CVE-2022-2211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the virt-v2v-2.2.0-5.el9 build changelog.

  - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number     of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or     malicious actor. (CVE-2022-2211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:7472 advisory.

  - A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It could     occur in fdctrl_transfer_handler() in hw/block/fdc.c while processing DMA read data transfers from the     floppy drive to the guest system. A privileged guest user could use this flaw to crash the QEMU process on     the host resulting in DoS scenario, or potential information leakage from the host memory. (CVE-2021-3507)

  - A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to     acquire the driver->nwfilters mutex before iterating over virNWFilterObj instances. There was no     protection to stop another thread from concurrently modifying the driver->nwfilters object. This flaw     allows a malicious, unprivileged user to exploit this issue via libvirt's API virConnectNumOfNWFilters to     crash the network filter management daemon (libvirtd/virtnwfilterd). (CVE-2022-0897)

  - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number     of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or     malicious actor. (CVE-2022-2211)

  - swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface. Versions     prior to 0.5.3, 0.6.2, and 0.7.1 are vulnerable to out-of-bounds read. A specially crafted header of     swtpm's state, where the blobheader's hdrsize indicator has an invalid value, may cause an out-of-bounds     access when the byte array representing the state of the TPM is accessed. This will likely crash swtpm or     prevent it from starting since the state cannot be understood. Users should upgrade to swtpm v0.5.3,     v0.6.2, or v0.7.1 to receive a patch. There are currently no known workarounds. (CVE-2022-23645)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7968 advisory.

  - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number     of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or     malicious actor. (CVE-2022-2211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7958 advisory.

  - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number     of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or     malicious actor. (CVE-2022-2211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7959 advisory.

  - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number     of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or     malicious actor. (CVE-2022-2211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:4308-1 advisory.

  - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number     of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or     malicious actor. (CVE-2022-2211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7958 advisory.

    - Fix CVE-2022-2211 Denial of Service in --key parameter       resolves: rhbz#2101281

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7968 advisory.

    - Fix CVE-2022-2211 Denial of Service in --key parameter       resolves: rhbz#2102719

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7959 advisory.

    - Fix CVE-2022-2211 Denial of Service in --key parameter       resolves: rhbz#2102721

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:7958 advisory.

  - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number     of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or     malicious actor. (CVE-2022-2211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:7959 advisory.

  - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number     of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or     malicious actor. (CVE-2022-2211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:7968 advisory.

  - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number     of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or     malicious actor. (CVE-2022-2211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7968 advisory.

    The virt-v2v package provides a tool for converting virtual machines to use the KVM (Kernel-based Virtual     Machine) hypervisor or Red Hat Enterprise Virtualization. The tool modifies both the virtual machine image     and its associated libvirt metadata. Also, virt-v2v can configure a guest to use VirtIO drivers if     possible.

    Security Fix(es):

    * libguestfs: Buffer overflow in get_keys leads to DoS (CVE-2022-2211)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.1 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7958 advisory.

    The libguestfs packages contain a library used for accessing and modifying virtual machine disk images.

    Security Fix(es):

    * libguestfs: Buffer overflow in get_keys leads to DoS (CVE-2022-2211)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.1 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7959 advisory.

    guestfs-tools is a set of tools that can be used to make batch configuration changes to guests, get disk     used/free statistics, perform backups and guest clones, change registry/UUID/hostname info, build guests     from scratch, and much more.

    Security Fix(es):

    * libguestfs: Buffer overflow in get_keys leads to DoS (CVE-2022-2211)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.1 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-7472 advisory.

    - Fix CVE-2022-2211 Denial of Service in --key parameter       resolves: rhbz#2101280
    - Fix CVE-2022-0485: Fail nbdcopy if NBD read or write fails       resolves: rhbz#2045718
    - nwfilter: fix crash when counting number of network filters (CVE-2022-0897, rhbz#2063902)
    - Fix CVE-2022-2211 Denial of Service in --key parameter       resolves: rhbz#2102720

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:7472 advisory.

  - A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It could     occur in fdctrl_transfer_handler() in hw/block/fdc.c while processing DMA read data transfers from the     floppy drive to the guest system. A privileged guest user could use this flaw to crash the QEMU process on     the host resulting in DoS scenario, or potential information leakage from the host memory. (CVE-2021-3507)

  - A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to     acquire the driver->nwfilters mutex before iterating over virNWFilterObj instances. There was no     protection to stop another thread from concurrently modifying the driver->nwfilters object. This flaw     allows a malicious, unprivileged user to exploit this issue via libvirt's API virConnectNumOfNWFilters to     crash the network filter management daemon (libvirtd/virtnwfilterd). (CVE-2022-0897)

  - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number     of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or     malicious actor. (CVE-2022-2211)

  - swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface. Versions     prior to 0.5.3, 0.6.2, and 0.7.1 are vulnerable to out-of-bounds read. A specially crafted header of     swtpm's state, where the blobheader's hdrsize indicator has an invalid value, may cause an out-of-bounds     access when the byte array representing the state of the TPM is accessed. This will likely crash swtpm or     prevent it from starting since the state cannot be understood. Users should upgrade to swtpm v0.5.3,     v0.6.2, or v0.7.1 to receive a patch. There are currently no known workarounds. (CVE-2022-23645)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7472 advisory.

  - QEMU: fdc: heap buffer overflow in DMA read data transfers (CVE-2021-3507)

  - libvirt: missing locking in nwfilterConnectNumOfNWFilters can lead to denial of service (CVE-2022-0897)

  - libguestfs: Buffer overflow in get_keys leads to DoS (CVE-2022-2211)

  - swtpm: Unchecked header size indicator against expected size (CVE-2022-23645)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:7472 advisory.

    Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware     platforms. The virt:rhel module contains packages which provide user-space components used to run virtual     machines using KVM. The packages also provide APIs for managing and interacting with the virtualized     systems.

    The following packages have been upgraded to a later upstream version: qemu-kvm (6.2.0). (BZ#2066828)

    Security Fix(es):

    * QEMU: fdc: heap buffer overflow in DMA read data transfers (CVE-2021-3507)

    * libvirt: missing locking in nwfilterConnectNumOfNWFilters can lead to denial of service (CVE-2022-0897)

    * libguestfs: Buffer overflow in get_keys leads to DoS (CVE-2022-2211)

    * swtpm: Unchecked header size indicator against expected size (CVE-2022-23645)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.7 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2581-1 advisory.

  - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number     of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or     malicious actor. (CVE-2022-2211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
206824	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.101026)	Nessus	Misc.	critical
206823	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.100173)	Nessus	Misc.	critical
199790	RHEL 8 : libguestfs (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
196081	RHEL 7 : libguestfs (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	medium
196046	RHEL 8 : libguestfs (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	medium
195988	RHEL 6 : libguestfs (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	medium
191239	CentOS 9 : guestfs-tools-1.48.2-5.el9	Nessus	CentOS Local Security Checks	medium
191167	CentOS 9 : virt-v2v-2.2.0-5.el9	Nessus	CentOS Local Security Checks	medium
184779	Rocky Linux 8 : virt:rhel and virt-devel:rhel (RLSA-2022:7472)	Nessus	Rocky Linux Local Security Checks	medium
184475	Rocky Linux 9 : virt-v2v (RLSA-2022:7968)	Nessus	Rocky Linux Local Security Checks	medium
170705	Rocky Linux 9 : libguestfs (RLSA-2022:7958)	Nessus	Rocky Linux Local Security Checks	medium
170703	Rocky Linux 9 : guestfs-tools (RLSA-2022:7959)	Nessus	Rocky Linux Local Security Checks	medium
168332	SUSE SLES15 Security Update : virt-v2v (SUSE-SU-2022:4308-1)	Nessus	SuSE Local Security Checks	medium
168109	Oracle Linux 9 : libguestfs (ELSA-2022-7958)	Nessus	Oracle Linux Local Security Checks	medium
168101	Oracle Linux 9 : virt-v2v (ELSA-2022-7968)	Nessus	Oracle Linux Local Security Checks	medium
168056	Oracle Linux 9 : guestfs-tools (ELSA-2022-7959)	Nessus	Oracle Linux Local Security Checks	medium
167974	AlmaLinux 9 : libguestfs (ALSA-2022:7958)	Nessus	Alma Linux Local Security Checks	medium
167967	AlmaLinux 9 : guestfs-tools (ALSA-2022:7959)	Nessus	Alma Linux Local Security Checks	medium
167965	AlmaLinux 9 : virt-v2v (ALSA-2022:7968)	Nessus	Alma Linux Local Security Checks	medium
167623	RHEL 9 : virt-v2v (RHSA-2022:7968)	Nessus	Red Hat Local Security Checks	medium
167595	RHEL 9 : libguestfs (RHSA-2022:7958)	Nessus	Red Hat Local Security Checks	medium
167578	RHEL 9 : guestfs-tools (RHSA-2022:7959)	Nessus	Red Hat Local Security Checks	medium
167524	Oracle Linux 8 : virt:ol / and / virt-devel:ol (ELSA-2022-7472)	Nessus	Oracle Linux Local Security Checks	medium
167461	AlmaLinux 8 : virt:rhel and virt-devel:rhel (ALSA-2022:7472)	Nessus	Alma Linux Local Security Checks	medium
167183	CentOS 8 : virt:rhel and virt-devel:rhel (CESA-2022:7472)	Nessus	CentOS Local Security Checks	medium
167145	RHEL 8 : virt:rhel and virt-devel:rhel (RHSA-2022:7472)	Nessus	Red Hat Local Security Checks	medium
163578	SUSE SLED15 / SLES15 Security Update : libguestfs (SUSE-SU-2022:2581-1)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2022-2211

medium

Tenable Plugins

critical

critical

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium