The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2020:0348 advisory.

  - libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c. (CVE-2019-15890)

  - tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC     DCC commands in EMU_IRC. This can cause a heap-based buffer overflow or other out-of-bounds access which     can lead to a DoS or potential execute arbitrary code. (CVE-2020-7039)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1261 advisory.

    The Advanced Virtualization module provides the user-space component for running virtual machines that use     KVM in environments managed by Red Hat products.

    Security Fix(es):

    * qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() (CVE-2020-7039)

    * qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages (CVE-2020-8608)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Two security issues have been found in the SLiRP networking implementation of QEMU, a fast processor emulator, which could result in the execution of arbitrary code or denial of service.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4283-1 advisory.

    Felipe Franciosi, Raphael Norwitz, and Peter Turschmid discovered that QEMU incorrectly handled iSCSI     server responses. A remote attacker in control of the iSCSI server could use this issue to cause QEMU to     crash, leading to a denial of service, or possibly execute arbitrary code. (CVE-2020-1711)

    It was discovered that the QEMU libslirp component incorrectly handled memory. A remote attacker could use     this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code.
    (CVE-2020-7039, CVE-2020-8608)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1116 advisory.

    Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of     architectures. The qemu-kvm packages provide the user-space component for running virtual machines that     use KVM.

    Security Fix(es):

    * QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() (CVE-2020-7039)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.8 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1150 advisory.

    Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of     architectures. The qemu-kvm-ma packages provide the user-space component for running virtual machines that     use KVM on the IBM z Systems, IBM Power, and 64-bit ARM architectures.

    Security Fix(es):

    * QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server (CVE-2020-1711)

    * QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() (CVE-2020-7039)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.8 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1300 advisory.

    KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on a variety of     architectures. The qemu-kvm-rhev packages provide the user-space component for running virtual machines     that use KVM in environments managed by Red Hat products.

    Security Fix(es):

    * QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server (CVE-2020-1711)
    * QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() (CVE-2020-7039)
    * QEMU: slirp: potential OOB access due to unsafe snprintf() usages (CVE-2020-8608)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4632-1 advisory.

    It was discovered that the SLiRP networking implementation of the QEMU emulator did not properly manage     memory under certain circumstances. An attacker could use this to cause a heap-based buffer overflow or     other out- of-bounds access, which can lead to a denial of service (application crash) or potentially     execute arbitrary code. (CVE-2020-7039)

    It was discovered that the SLiRP networking implementation of the QEMU emulator misuses snprintf return     values. An attacker could use this to cause a denial of service (application crash) or potentially execute     arbitrary code. (CVE-2020-8608)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1360 advisory.

  - QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() (CVE-2020-7039)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1344 advisory.

    Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware     platforms. The virt:rhel module contains packages which provide user-space components used to run virtual     machines using KVM. The packages also provide APIs for managing and interacting with the virtualized     systems.

    Security Fix(es):

    * QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() (CVE-2020-7039)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC.
This can cause a heap-based buffer overflow or other out-of-bounds access which can lead to a DoS or potential execute arbitrary code.
(CVE-2020-7039)

An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU versions 2.12.0 before 4.2.1 handled a response coming from an iSCSI server while checking the status of a Logical Address Block (LBA) in an iscsi_co_block_status() routine. A remote user could use this flaw to crash the QEMU process, resulting in a denial of service or potential execution of arbitrary code with privileges of the QEMU process on the host. (CVE-2020-1711)

ID	Name	Product	Family	Published	Updated	Severity
184510	Rocky Linux 8 : container-tools:rhel8 (RLSA-2020:0348)	Nessus	Rocky Linux Local Security Checks	11/6/2023	11/6/2023	medium
170306	RHEL 8 : virt:8.1 (RHSA-2020:1261)	Nessus	Red Hat Local Security Checks	1/23/2023	11/7/2024	medium
133419	Debian DSA-4616-1 : qemu - security update	Nessus	Debian Local Security Checks	2/3/2020	3/28/2024	medium
133796	Ubuntu 16.04 LTS / 18.04 LTS : QEMU vulnerabilities (USN-4283-1)	Nessus	Ubuntu Local Security Checks	2/19/2020	8/27/2024	medium
135036	RHEL 7 : qemu-kvm (RHSA-2020:1116)	Nessus	Red Hat Local Security Checks	3/31/2020	11/7/2024	medium
135051	RHEL 7 : qemu-kvm-ma (RHSA-2020:1150)	Nessus	Red Hat Local Security Checks	4/1/2020	11/8/2024	medium
135173	RHEL 7 : qemu-kvm-rhev (RHSA-2020:1300)	Nessus	Red Hat Local Security Checks	4/2/2020	11/7/2024	medium
142969	Ubuntu 16.04 LTS / 18.04 LTS : SLiRP vulnerabilities (USN-4632-1)	Nessus	Ubuntu Local Security Checks	11/17/2020	8/27/2024	medium
145994	CentOS 8 : container-tools:1.0 (CESA-2020:1360)	Nessus	CentOS Local Security Checks	2/1/2021	2/8/2023	medium
135253	RHEL 8 : virt:rhel (RHSA-2020:1344)	Nessus	Red Hat Local Security Checks	4/7/2020	11/5/2024	medium
134898	Amazon Linux 2 : qemu (ALAS-2020-1407)	Nessus	Amazon Linux Local Security Checks	3/26/2020	5/18/2022	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium