The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1394-1 advisory.

  - A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in     QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a     denial of service. (CVE-2023-3019)

  - A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. The     qemu_clipboard_request() function can be reached before vnc_server_cut_text_caps() was called and had the     chance to initialize the clipboard peer, leading to a NULL pointer dereference. This could allow a     malicious authenticated VNC client to crash QEMU and trigger a denial of service. (CVE-2023-6683)

  - QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an     expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in     esp_do_nodma in hw/scsi/esp.c because of an underflow of async_len. (CVE-2024-24474)

  - A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-bus, virtio-     crypto), where the mem_reentrancy_guard flag insufficiently protects against DMA reentrancy issues. This     issue could allow a malicious privileged guest user to crash the QEMU process on the host, resulting in a     denial of service or allow arbitrary code execution within the context of the QEMU process on the host.
    (CVE-2024-3446)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the util-linux package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed.QEMU has two     operating modes: Full system emulation. In this mode, QEMU emulates a full system (for example a PC),     including one or several processors and various peripherals. It can be used to launch different Operating     Systems without rebooting the PC or to debug system code. User mode emulation. In this mode, QEMU can     launch processes compiled for one CPU on another CPU. It can be used to launch the Wine Windows API     emulator (https://www.winehq.org) or to ease cross-compilation and cross-debugging.You can refer to     https://www.qemu.org for more infortmation.A heap based buffer overflow was found in the SDHCI device     emulation of QEMU. The bug is triggered when both `s-data_count` and the size of `s-fifo_buffer` are     set to 0x200, leading to an out-of-bound access. A malicious guest could use this flaw to crash the QEMU     process on the host, resulting in a denial of service condition.(CVE-2024-3447     )

    QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed.QEMU has two     operating modes: Full system emulation. In this mode, QEMU emulates a full system (for example a PC),     including one or several processors and various peripherals. It can be used to launch different Operating     Systems without rebooting the PC or to debug system code. User mode emulation. In this mode, QEMU can     launch processes compiled for one CPU on another CPU. It can be used to launch the Wine Windows API     emulator (https://www.winehq.org) or to ease cross-compilation and cross-debugging.You can refer to     https://www.qemu.org for more infortmation.A double free vulnerability was found in QEMU virtio devices     (virtio-gpu, virtio-serial-bus, virtio-crypto), where the mem_reentrancy_guard flag insufficiently     protects against DMA reentrancy issues. This issue could allow a malicious privileged guest user to crash     the QEMU process on the host, resulting in a denial of service or allow arbitrary code execution within     the context of the QEMU process on the host.(CVE-2024-3446)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization util-linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0500 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2024-4467:
    A heap buffer overflow was found in the virtio-snd device in QEMU. When reading input audio in the virtio-     snd input callback, virtio_snd_pcm_in_cb, the function did not check whether the iov can fit the data     buffer. This issue can trigger an out-of-bounds write if the size of the virtio queue element is equal to     virtio_snd_pcm_status, which makes the available space for audio data zero.

    CVE-2024-7730:
    A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network     card, the indirections_table data within RSS becomes controllable. Setting excessively large values may     cause an index out-of-bounds issue, potentially resulting in heap overflow access. This flaw allows a     privileged user in the guest to crash the QEMU process on the host.

    CVE-2024-6505:
    A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. A specially crafted image file     containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host     to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing     external file.

    CVE-2024-3567:
    A flaw was found in QEMU. An assertion failure was present in the update_sctp_checksum() function in     hw/net/net_tx_pkt.c when trying to calculate the checksum of a short-sized fragmented packet. This flaw     allows a malicious guest to crash QEMU and cause a denial of service condition.

    CVE-2024-7409:
    A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via     improper synchronization during socket closure when a client keeps a socket open as the server is taken     offline.

    CVE-2024-3446:
    A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-bus, virtio-     crypto), where the mem_reentrancy_guard flag insufficiently protects against DMA reentrancy issues. This     issue could allow a malicious privileged guest to crash the QEMU process on the host, resulting in a     denial of service or allow arbitrary code execution within the context of the QEMU process on the host.

    CVE-2024-3447:
    A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when     both `s->data_count` and the size of  `s->fifo_buffer` are set to 0x200, leading to an out-of-bound     access. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial     of service condition.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3229-1 advisory.

    - CVE-2024-3447: Fix heap buffer overflow in sdhci_write_dataport(). (bsc#1218485)
    - CVE-2023-6693: Fix stack buffer overflow in virtio_net_flush_tx(). (bsc#1218484)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
193796	SUSE SLES15 Security Update : qemu (SUSE-SU-2024:1394-1)	Nessus	SuSE Local Security Checks	2024/4/24	2025/6/26	medium
205903	EulerOS Virtualization 2.11.0 : util-linux (EulerOS-SA-2024-2203)	Nessus	Huawei Local Security Checks	2024/8/20	2025/8/6	high
238706	TencentOS Server 4: qemu (TSSA-2024:0500)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
207223	SUSE SLES12 Security Update : qemu (SUSE-SU-2024:3229-1)	Nessus	SuSE Local Security Checks	2024/9/13	2025/8/6	medium

检测

插件搜索

medium

high

high

medium