The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:0344 advisory.

    KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on a variety of     architectures. The qemu-kvm-rhev packages provide the user-space component for running virtual machines     that use KVM in environments managed by Red Hat products.

    Security Fix(es):

    * Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-     bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged     user inside a guest could use this flaw to crash the Qemu process resulting in DoS or potentially execute     arbitrary code on the host with privileges of Qemu process on the host. (CVE-2017-2615)

    * An out-of-bounds read-access flaw was found in the QEMU emulator built with IP checksum routines. The     flaw could occur when computing a TCP/UDP packet's checksum, because a QEMU function used the packet's     payload length without checking against the data buffer's size. A user inside a guest could use this flaw     to crash the QEMU process (denial of service). (CVE-2016-2857)

    Red Hat would like to thank Wjjzhang (Tencent.com Inc.) Li Qiang (360.cn Inc.) for reporting CVE-2017-2615     and Ling Liu (Qihoo 360 Inc.) for reporting CVE-2016-2857.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 6 : qemu-kvm-rhev (RHSA-2017:0344)

critical Nessus Plugin ID 97487

Version 3.12