The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3923-1 advisory.

    Michael Hanselmann discovered that QEMU incorrectly handled the Media Transfer Protocol (MTP). An attacker     inside the guest could use this issue to read or write arbitrary files and cause a denial of service, or     possibly execute arbitrary code. This issue only affected Ubuntu 18.10. (CVE-2018-16867)

    Michael Hanselmann discovered that QEMU incorrectly handled the Media Transfer Protocol (MTP). An attacker     inside the guest could use this issue to read arbitrary files, contrary to expectations. This issue only     affected Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-16872)

    Zhibin Hu discovered that QEMU incorrectly handled the Plan 9 File System support. An attacker inside the     guest could use this issue to cause QEMU to crash, resulting in a denial of service. (CVE-2018-19489)

    Li Quang and Saar Amar discovered multiple issues in the QEMU PVRDMA device. An attacker inside the guest     could use these issues to cause a denial of service, or possibly execute arbitrary code. This issue only     affected Ubuntu 18.10. These issues were resolved by disabling PVRDMA support in Ubuntu 18.10.
    (CVE-2018-20123, CVE-2018-20124, CVE-2018-20125, CVE-2018-20126, CVE-2018-20191, CVE-2018-20216)

    Michael Hanselmann discovered that QEMU incorrectly handled certain i2c commands. A local attacker could     possibly use this issue to read QEMU process memory. This issue only affected Ubuntu 18.04 LTS and Ubuntu     18.10. (CVE-2019-3812)

    It was discovered that QEMU incorrectly handled the Slirp networking back-end. An attacker inside the     guest could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute     arbitrary code on the host. In the default installation, when QEMU is used with libvirt, attackers would     be isolated by the libvirt AppArmor profile. (CVE-2019-6778)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : QEMU vulnerabilities (USN-3923-1)

high Nessus Plugin ID 123457

Version 1.8

Version 1.7

Version 1.8 Aug 28, 2024, 11:02 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202408282302
Version 1.7 Oct 21, 2023, 9:06 AM Detection Exploit attributes ("Exploit available" set to "False") Plugin metadata Plugin Feed: 202310210906