There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an
    out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A
    privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute
    arbitrary code on host with privileges of the QEMU process. (CVE-2017-2620)

  - Memory leak in hw/net/eepro100.c in QEMU (aka Quick Emulator) allows local guest OS administrators to
    cause a denial of service (memory consumption and QEMU process crash) by repeatedly unplugging an i8255x
    (PRO100) NIC device. (CVE-2016-9101)

  - Memory leak in the v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local
    guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) via a
    large number of Txattrcreate messages with the same fid number. (CVE-2016-9102)

  - The v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS
    administrators to obtain sensitive host heap memory information by reading xattribute values before
    writing to them. (CVE-2016-9103)

  - Multiple integer overflows in the (1) v9fs_xattr_read and (2) v9fs_xattr_write functions in hw/9pfs/9p.c
    in QEMU (aka Quick Emulator) allow local guest OS administrators to cause a denial of service (QEMU
    process crash) via a crafted offset, which triggers an out-of-bounds access. (CVE-2016-9104)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an
    out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A
    privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute
    arbitrary code on host with privileges of the QEMU process. (CVE-2017-2620)

  - Memory leak in the virtio_gpu_resource_create_2d function in hw/display/virtio-gpu.c in QEMU (aka Quick
    Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via a
    large number of VIRTIO_GPU_CMD_RESOURCE_CREATE_2D commands. (CVE-2016-7994)

  - Memory leak in the ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU (aka Quick Emulator) allows
    local guest OS administrators to cause a denial of service (memory consumption) via a large number of
    crafted buffer page select (PG) indexes. (CVE-2016-7995)

  - The xhci_ring_fetch function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS
    administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging failure
    to limit the number of link Transfer Request Blocks (TRB) to process. (CVE-2016-8576)

  - Memory leak in the v9fs_read function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS
    administrators to cause a denial of service (memory consumption) via vectors related to an I/O read
    operation. (CVE-2016-8577)

远程主机受到 GLSA-201702-28 中所述漏洞的影响（QEMU：多个漏洞）在 QEMU 中发现多个漏洞。请检查下面引用的 CVE 标识符以了解详细信息。影响：本地攻击者可能在主机上以 QEMU 进程的权限执行任意代码、获取主机系统上的权限、造成拒绝服务情况或者获取敏感信息。解决方法：目前无任何已知的解决方法。

變更描述： [15:3.1.0-5.el7] - 僅在主機支援的情況下才啟用暫停輪詢控制 MSR (Mark Kanda) [Orabug: 29946722] [15:3.1.0-4.el7] - kvm：i386：暫停輪詢控制 MSR 支援 (Marcelo Tosatti) [Orabug: 29933278] - 將已修正的 CVE 記錄在案：CVE-2017-9524、CVE-2017-6058、CVE-2017-5931 (Mark Kanda) [Orabug: 29886908] {CVE-2017-5931}{CVE-2017-6058}{CVE-2017-9524} - pvrdma：發生錯誤時釋放裝置資源 (Prasad J Pandit) [Orabug: 29056678]{CVE-2018-20123} - qxl：檢查版本資訊物件 (Prasad J Pandit) [Orabug: 29886906]{CVE-2019-12155} - target/i386：新增 MDS-NO 功能 (Paolo Bonzini) [Orabug: 29820428] {CVE-2018-12126}{CVE-2018-12127}{CVE-2018-12130}{CVE-2019-11091} - docs：建議在所有 Intel CPU 上使用 md-clear 功能 (Daniel P. Berrang&eacute ) [Orabug: 29820428] {CVE-2018-12126}{CVE-2018-12127}{CVE-2018-12130}{CVE-2019-11091} - target/i386：定義 md-clear 位元 (Paolo Bonzini) [Orabug: 29820428] {CVE-2018-12126}{CVE-2018-12127}{CVE-2018-12130}{CVE-2019-11091} - pvh：如果使用 PVH 開機，則阻止移轉 (Liam Merwick) [Orabug: 29796676] - hw/i386/pc：在執行 PVH 載入器之前執行多重開機載入器 (Stefano Garzarella) [Orabug: 29796676] - optionrom/pvh：從 fw_cfg 載入 initrd (Stefano Garzarella) [Orabug: 29796676] - hw/i386/pc：使用 PVH 選項唯讀記憶體 (Stefano Garzarella) [Orabug: 29796676] - qemu.spec：將 pvh.bin 新增到 %files (Liam Merwick) [Orabug: 29796676] - optionrom：新增新的 PVH 選項唯讀記憶體 (Stefano Garzarella) [Orabug: 29796676] - linuxboot_dma：在新標頭中移動常用函式 (Stefano Garzarella) [Orabug: 29796676] - linuxboot_dma：移除 FW_CFG 的重複定義 (Stefano Garzarella) [Orabug: 29796676] - pvh：載入 initrd 並透過 fw_cfg 對其進行洩露 (Stefano Garzarella) [Orabug: 29796676] - pvh：使用直接開機 ABI，啟動未壓縮的核心 (Liam Merwick) [Orabug: 29796676] - pvh：新增 x86/HVM 直接開機 ABI 標頭檔 (Liam Merwick) [Orabug: 29796676] - elf-ops.h：新增 get_elf_note_type() (Liam Merwick) [Orabug: 29796676] - elf：新增可選函式 ptr 到 load_elf() 以剖析 ELF 備註 (Liam Merwick) [Orabug: 29796676]

遠端主機受到 GLSA-201702-28 中所述的弱點影響 (QEMU：多個弱點) 在 QEMU 中發現多個弱點。如需詳細資訊，請檢閱以下提及的 CVE 識別碼。影響：本機攻擊者可能在主機上以 QEMU 處理程序的權限執行任意程式碼、取得在主機系統上的權限、造成拒絕服務情形或是取得敏感資訊。因應措施：目前尚無已知的因應措施。

更改描述： [15:3.1.0-5.el7] - 仅在主机支持的情况下才启用暂停轮询控制 MSR (Mark Kanda) [Orabug: 29946722] [15:3.1.0-4.el7] - kvm：i386：暂停轮询控制 MSR 支持 (Marcelo Tosatti) [Orabug: 29933278] - 将已修复的 CVE 记录在案：CVE-2017-9524、CVE-2017-6058、CVE-2017-5931 (Mark Kanda) [Orabug: 29886908] {CVE-2017-5931} {CVE-2017-6058} {CVE-2017-9524} - pvrdma：发生错误时释放设备资源 (Prasad J Pandit) [Orabug: 29056678] {CVE-2018-20123} - qxl：检查版本信息对象 (Prasad J Pandit) [Orabug: 29886906] {CVE-2019-12155} - target/i386：添加 MDS-NO 功能 (Paolo Bonzini) [Orabug: 29820428] {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130} {CVE-2019-11091} - docs：建议在所有 Intel CPU 上使用 md-clear 功能 (Daniel P. Berrang&eacute ) [Orabug: 29820428] {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130} {CVE-2019-11091} - target/i386：定义 md-clear 位 (Paolo Bonzini) [Orabug: 29820428] {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130} {CVE-2019-11091} - pvh：如果使用 PVH 引导，则阻止迁移 (Liam Merwick) [Orabug: 29796676] - hw/i386/pc：在 PVH 加载程序之前运行多引导加载程序 (Stefano Garzarella) [Orabug: 29796676] - optionrom/pvh：从 fw_cfg 加载 initrd (Stefano Garzarella) [Orabug: 29796676] - hw/i386/pc：使用 PVH 选项只读存储器 (Stefano Garzarella) [Orabug: 29796676] - qemu.spec：将 pvh.bin 添加到 %files (Liam Merwick) [Orabug: 29796676] - optionrom：添加新 PVH 选项只读存储器 (Stefano Garzarella) [Orabug: 29796676] - linuxboot_dma：在新标头中移动常用函数 (Stefano Garzarella) [Orabug: 29796676] - linuxboot_dma：删除 FW_CFG 的重复定义 (Stefano Garzarella) [Orabug: 29796676] - pvh：加载 initrd 并通过 fw_cfg 对其进行泄露 (Stefano Garzarella) [Orabug: 29796676] - pvh：使用直接启动 ABI，引导未压缩的内核 (Liam Merwick) [Orabug: 29796676] - pvh：添加 x86/HVM 直接启动 ABI 标头文件 (Liam Merwick) [Orabug: 29796676] - elf-ops.h：添加 get_elf_note_type() (Liam Merwick) [Orabug: 29796676] - elf：添加可选函数 ptr 到 load_elf() 以解析 ELF 注释 (Liam Merwick) [Orabug: 29796676]

変更の説明：[15:3.1.0-5.el7] - ホストによってサポートされている場合のみ、ポーリング停止コントロールMSRを有効にする（Mark Kanda）[Orabug: 29946722] [15:3.1.0-4.el7] - kvm：i386：ポーリング停止コントロールMSRのサポート（Marcelo Tosatti）[Orabug: 29933278] - 以下のCVEを修正済みとして文書化：CVE-2017-9524、CVE-2017-6058、CVE-2017-5931（Mark Kanda）[Orabug: 29886908] {CVE-2017-5931} {CVE-2017-6058} {CVE-2017-9524} - pvrdma：エラーが発生した場合にデバイスリソースを解放する（Prasad J Pandit）[Orabug: 29056678] {CVE-2018-20123} - qxl：リリース情報オブジェクトを確認する（Prasad J Pandit）[Orabug: 29886906] {CVE-2019-12155} - target/i386：MDS-NO機能を追加する（Paolo Bonzini）[Orabug: 29820428] {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130} {CVE-2019-11091} - docs：すべてのIntel CPUでmd-clear機能の使用を推奨する（Daniel P. Berrangé）[Orabug: 29820428] {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130} {CVE-2019-11091} - target/i386：md-clearビットを定義する（Paolo Bonzini）[Orabug: 29820428] {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130} {CVE-2019-11091} - pvh：PVHを使用して起動する場合は移行をブロックする（Liam Merwick）[Orabug: 29796676] - hw/i386/pc：PVHローダーの前にマルチブートローダーを実行する（Stefano Garzarella）[Orabug: 29796676] - optionrom/pvh：fw_cfgからinitrdを読み込む（Stefano Garzarella）[Orabug: 29796676] - hw/i386/pc：PVHオプションROMを使用する（Stefano Garzarella）[Orabug: 29796676] - qemu.spec：%filesにpvh.binを追加する（Liam Merwick）[Orabug: 29796676] - optionrom：新しいPVHオプションROMを追加する（Stefano Garzarella）[Orabug: 29796676] - linuxboot_dma：共通の関数を新しいヘッダーに移動する（Stefano Garzarella）[Orabug: 29796676] - linuxboot_dma：FW_CFGの重複した定義を削除する（Stefano Garzarella）[Orabug: 29796676] - pvh：initrdを読み込み、fw_cfgを通じて公開する（Stefano Garzarella）[Orabug: 29796676] - pvh：ダイレクトブートABIを使って非圧縮カーネルを起動する（Liam Merwick）[Orabug: 29796676] - pvh：x86/HVMダイレクトブートABIのヘッダーファイルを追加する（Liam Merwick）[Orabug: 29796676] - elf-ops.h：get_elf_note_type()を追加する（Liam Merwick）[Orabug: 29796676] - elf：load_elf()にオプション関数ptrを追加して、ELF記号を解析する（Liam Merwick）[Orabug: 29796676]

リモートホストは、GLSA-201702-28（QEMU：複数の脆弱性）で説明されている脆弱性に影響されています。複数の脆弱性がQEMUで発見されています。詳細については、以下に記載されているCVE識別番号を参照してください。影響：ローカルの攻撃者が、ホスト上のQEMUプロセスの権限で任意のコードを実行したり、ホストシステムの権限を取得したり、サービス拒否の状態を引き起こしたり、機密情報を取得する可能性があります。回避策：現時点では、既知の回避策はありません。

The remote host is affected by the vulnerability described in GLSA-201702-28 (QEMU: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in QEMU. Please review the       CVE identifiers referenced below for details.
  Impact :

    A local attacker could potentially execute arbitrary code with       privileges of QEMU process on the host, gain privileges on the host       system, cause a Denial of Service condition, or obtain sensitive       information.
  Workaround :

    There is no known workaround at this time.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4713 advisory.

    - Document CVEs as fixed: CVE-2017-9524, CVE-2017-6058, CVE-2017-5931 (Mark Kanda)  [Orabug: 29886908]     {CVE-2017-5931} {CVE-2017-6058} {CVE-2017-9524}
    - pvrdma: release device resources in case of an error (Prasad J Pandit)  [Orabug: 29056678]     {CVE-2018-20123}
    - qxl: check release info object (Prasad J Pandit)  [Orabug: 29886906]  {CVE-2019-12155}
    - target/i386: add MDS-NO feature (Paolo Bonzini)  [Orabug: 29820428]  {CVE-2018-12126} {CVE-2018-12127}     {CVE-2018-12130} {CVE-2019-11091}
    - docs: recommend use of md-clear feature on all Intel CPUs (Daniel P. Berrange)  [Orabug: 29820428]     {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130} {CVE-2019-11091}
    - target/i386: define md-clear bit (Paolo Bonzini)  [Orabug: 29820428]  {CVE-2018-12126} {CVE-2018-12127}     {CVE-2018-12130} {CVE-2019-11091}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
406784	Alpine: multiple qemu packages: security update to 2.8.1.1-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	critical
406784	Alpine: multiple qemu packages: security update to 2.8.1.1-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	critical
400893	Alpine: multiple qemu packages: security update to 2.8.1-r0 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/8/16	2026/7/2	critical
400893	Alpine: multiple qemu packages: security update to 2.8.1-r0 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/8/16	2026/7/2	critical
406783	Alpine: multiple qemu packages: security update to 2.8.1-r1	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	critical
406783	Alpine: multiple qemu packages: security update to 2.8.1-r1	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	critical
97271	GLSA-201702-28：QEMU：多个漏洞	Nessus	Gentoo Local Security Checks	2017/2/21	2025/12/31	critical
126673	Oracle Linux 7 : qemu (ELSA-2019-4713) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)	Nessus	Oracle Linux Local Security Checks	2019/7/15	2024/11/1	high
97271	GLSA-201702-28：QEMU：多個弱點	Nessus	Gentoo Local Security Checks	2017/2/21	2025/12/31	critical
126673	Oracle Linux 7 : qemu (ELSA-2019-4713) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)	Nessus	Oracle Linux Local Security Checks	2019/7/15	2024/11/1	high
126673	Oracle Linux 7：qemu（ELSA-2019-4713）（MDSUM/RIDL）（MFBDS/RIDL/ZombieLoad）（MLPDS/RIDL）（MSBDS/Fallout）	Nessus	Oracle Linux Local Security Checks	2019/7/15	2024/11/1	high
97271	GLSA-201702-28：QEMU：複数の脆弱性	Nessus	Gentoo Local Security Checks	2017/2/21	2025/12/31	critical
97271	GLSA-201702-28 : QEMU: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2017/2/21	2025/12/31	critical
126673	Oracle Linux 7 : qemu (ELSA-2019-4713)	Nessus	Oracle Linux Local Security Checks	2019/7/15	2024/11/1	high

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

high

critical

high

high

critical

critical

high