The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3744-1 advisory.

    Security fixes:

    - CVE-2024-8354: Fixed assertion failure in usb_ep_get() (bsc#1230834)
    - CVE-2024-8612: Fixed information leak in virtio devices (bsc#1230915)

    Update version to 8.2.7:

    Security fixes:

    - CVE-2024-7409: Fixed denial of service via improper synchronization in QEMU NBD Server during socket     closure (bsc#1229007)
    - CVE-2024-4693: Fixed improper release of configure vector in virtio-pci that lead to guest triggerable     crash (bsc#1224132)

    Other fixes:

    - added missing fix for ppc64 emulation that caused corruption in userspace (bsc#1230140)
    - target/ppc: Fix lxvx/stxvx facility check (bsc#1229929)
    - accel/kvm: check for KVM_CAP_READONLY_MEM on VM (bsc#1231519)

    Full changelog here:

    https://lore.kernel.org/qemu-devel/d9ff276f-f1ba-4e90-8343-a7a0dc2bf305@tls.msk.ru/

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES15 Security Update : qemu (SUSE-SU-2024:3744-1)

low Nessus Plugin ID 209545

Version 1.2

Version 1.1

Version 1.2 Nov 15, 2024, 3:52 PM IAVM reference Plugin Feed: 202411151552
Version 1.1 Oct 23, 2024, 9:45 AM New Plugin Feed: 202410230945