According to the versions of the util-linux package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed.QEMU has two     operating modes: Full system emulation. In this mode, QEMU emulates a full system (for example a PC),     including one or several processors and various peripherals. It can be used to launch different Operating     Systems without rebooting the PC or to debug system code. User mode emulation. In this mode, QEMU can     launch processes compiled for one CPU on another CPU. It can be used to launch the Wine Windows API     emulator (https://www.winehq.org) or to ease cross-compilation and cross-debugging.You can refer to     https://www.qemu.org for more infortmation.A heap based buffer overflow was found in the SDHCI device     emulation of QEMU. The bug is triggered when both `s-data_count` and the size of `s-fifo_buffer` are     set to 0x200, leading to an out-of-bound access. A malicious guest could use this flaw to crash the QEMU     process on the host, resulting in a denial of service condition.(CVE-2024-3447     )

    QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed.QEMU has two     operating modes: Full system emulation. In this mode, QEMU emulates a full system (for example a PC),     including one or several processors and various peripherals. It can be used to launch different Operating     Systems without rebooting the PC or to debug system code. User mode emulation. In this mode, QEMU can     launch processes compiled for one CPU on another CPU. It can be used to launch the Wine Windows API     emulator (https://www.winehq.org) or to ease cross-compilation and cross-debugging.You can refer to     https://www.qemu.org for more infortmation.A double free vulnerability was found in QEMU virtio devices     (virtio-gpu, virtio-serial-bus, virtio-crypto), where the mem_reentrancy_guard flag insufficiently     protects against DMA reentrancy issues. This issue could allow a malicious privileged guest user to crash     the QEMU process on the host, resulting in a denial of service or allow arbitrary code execution within     the context of the QEMU process on the host.(CVE-2024-3446)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization util-linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3229-1 advisory.

    - CVE-2024-3447: Fix heap buffer overflow in sdhci_write_dataport(). (bsc#1218485)
    - CVE-2023-6693: Fix stack buffer overflow in virtio_net_flush_tx(). (bsc#1218484)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of QEMU installed on the remote Windows host is prior to 9.0.0 and therefore vulnerable to the following:

  - A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-bus, virtio-crypto), where     the mem_reentrancy_guard flag insufficiently protects against DMA reentrancy issues. This issue could allow a     malicious privileged guest user to crash the QEMU process on the host, resulting in a denial of service or allow     arbitrary code execution within the context of the QEMU process on the host. (CVE-2024-3446)

  - A stack based buffer overflow was found in the virtio-net device of QEMU. This issue occurs when flushing TX in     the virtio_net_flush_tx function if guest features VIRTIO_NET_F_HASH_REPORT, VIRTIO_F_VERSION_1 and     VIRTIO_NET_F_MRG_RXBUF are enabled. This could allow a malicious user to overwrite local variables allocated on the     stack. Specifically, the `out_sg` variable could be used to read a part of process memory and send it to the wire,     causing an information leak. (CVE-2023-6693)

  - A flaw was found in QEMU. An assertion failure was present in the update_sctp_checksum() function in     hw/net/net_tx_pkt.c when trying to calculate the checksum of a short-sized fragmented packet. This flaw allows a     malicious guest to crash QEMU and cause a denial of service condition. (CVE-2024-3567)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0500 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2024-4467:
    A heap buffer overflow was found in the virtio-snd device in QEMU. When reading input audio in the virtio-     snd input callback, virtio_snd_pcm_in_cb, the function did not check whether the iov can fit the data     buffer. This issue can trigger an out-of-bounds write if the size of the virtio queue element is equal to     virtio_snd_pcm_status, which makes the available space for audio data zero.

    CVE-2024-7730:
    A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network     card, the indirections_table data within RSS becomes controllable. Setting excessively large values may     cause an index out-of-bounds issue, potentially resulting in heap overflow access. This flaw allows a     privileged user in the guest to crash the QEMU process on the host.

    CVE-2024-6505:
    A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. A specially crafted image file     containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host     to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing     external file.

    CVE-2024-3567:
    A flaw was found in QEMU. An assertion failure was present in the update_sctp_checksum() function in     hw/net/net_tx_pkt.c when trying to calculate the checksum of a short-sized fragmented packet. This flaw     allows a malicious guest to crash QEMU and cause a denial of service condition.

    CVE-2024-7409:
    A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via     improper synchronization during socket closure when a client keeps a socket open as the server is taken     offline.

    CVE-2024-3446:
    A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-bus, virtio-     crypto), where the mem_reentrancy_guard flag insufficiently protects against DMA reentrancy issues. This     issue could allow a malicious privileged guest to crash the QEMU process on the host, resulting in a     denial of service or allow arbitrary code execution within the context of the QEMU process on the host.

    CVE-2024-3447:
    A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when     both `s->data_count` and the size of  `s->fifo_buffer` are set to 0x200, leading to an out-of-bound     access. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial     of service condition.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1394-1 advisory.

    - CVE-2023-3019: Fixed heap use-after-free in e1000e_write_packet_to_guest() (bsc#1213269)
     - CVE-2023-6683: Fixed NULL pointer dereference in qemu_clipboard_request() (bsc#1218889)
     - CVE-2024-24474: Fixed integer overflow results in buffer overflow via SCSI command (bsc#1220134)
     - CVE-2024-3446: Fixed DM reentrancy issue that could lead to double free vulnerability (bsc#1222843)
     - CVE-2024-3447: Fixed heap buffer overflow in sdhci_write_dataport() (bsc#1222845)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
205903	EulerOS Virtualization 2.11.0 : util-linux (EulerOS-SA-2024-2203)	Nessus	Huawei Local Security Checks	2024/8/20	2025/8/6	high
207223	SUSE SLES12: qemu / qemu-arm / qemu-audio-alsa / qemu-audio-oss / qemu-audio-pa / etc (SUSE-SU-2024:3229-1)	Nessus	SuSE Local Security Checks	2024/9/13	2026/6/25	medium
200136	QEMU < 9.0.0 Multiple Vulnerabilities	Nessus	Windows	2024/6/6	2024/7/12	medium
238706	TencentOS Server 4: qemu (TSSA-2024:0500)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
193796	SUSE SLES15: qemu / qemu-SLOF / qemu-accel-tcg-x86 / qemu-arm / qemu-audio-alsa / etc (SUSE-SU-2024:1394-1)	Nessus	SuSE Local Security Checks	2024/4/24	2026/6/25	medium

检测

插件搜索

high

medium

medium

high

medium