The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1762 advisory.

    - Resolves: bz#1917451       (CVE-2020-29443 virt:rhel/qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands     [rhel-8.4.0])
    - Resolves: bz#1919111       (CVE-2020-35517 virt:rhel/qemu-kvm: QEMU: virtiofsd: potential privileged host device access from guest     [rhel-8.4.0])
    - Resolves: bz#1912974       (CVE-2020-11947 virt:rhel/qemu-kvm: QEMU: heap buffer overflow in iscsi_aio_ioctl_cb() in block/iscsi.c     may lead to information disclosure [rhel-8])
    - Resolves: bz#1918054       (CVE-2020-10756 virt:rhel/qemu-kvm: QEMU: slirp: networking out-of-bounds read information disclosure     vulnerability [rhel-8.4.0])
    - Resolves: bz#1904393       (CVE-2020-27821 virt:rhel/qemu-kvm: QEMU: heap buffer overflow in msix_table_mmio_write() in     hw/pci/msix.c [rhel-8])
    - Resolves: bz#1898628       (CVE-2020-25723 virt:rhel/qemu-kvm: QEMU: assertion failure through usb_packet_unmap() in hw/usb/hcd-     ehci.c [rhel-8])
    - Resolves: bz#1903070       (CVE-2020-25707 CVE-2020-28916 virt:rhel/qemu-kvm: various flaws [rhel-8])
    - Resolves: bz#1902237       (CVE-2020-29129 CVE-2020-29130 virt:rhel/qemu-kvm: QEMU: slirp: out-of-bounds access while processing     ARP/NCSI packets [rhel-8])
    - Resolves: bz#1860994       (CVE-2020-16092 virt:rhel/qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment()     in hw/net/net_tx_pkt.c [rhel-8])

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 8 : virt:ol / and / virt-devel:rhel (ELSA-2021-1762)

medium Nessus Plugin ID 155325

Version 1.5