There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An issue was discovered in Xen through 4.14.x allowing x86 HVM guest OS users to cause a denial of service
    (stack corruption), cause a data leak, or possibly gain privileges because of an off-by-one error. NOTE:
    this issue is caused by an incorrect fix for CVE-2020-27671. (CVE-2020-29040)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of
    service, achieve data corruption, or possibly gain privileges by exploiting a race condition that leads to
    a use-after-free involving 2MiB and 1GiB superpages. (CVE-2020-27672)

  - An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a denial of service
    (data corruption), cause a data leak, or possibly gain privileges because an AMD IOMMU page-table entry
    can be half-updated. (CVE-2020-27670)

  - An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of
    service (data corruption), cause a data leak, or possibly gain privileges because coalescing of per-page
    IOMMU TLB flushes is mishandled. (CVE-2020-27671)

  - An issue was discovered in Xen through 4.14.x allowing x86 PV guest OS users to gain guest OS privileges
    by modifying kernel memory contents, because invalidation of TLB entries is mishandled during use of an
    INVLPG-like attack technique. (CVE-2020-27674)

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 Xen 4.14.x 及之前版本中发现一个问题，其允许 x86 HVM 和 PVH 客户机操作系统用户利用差一错误造成拒绝服务（堆栈损坏）、造成数据泄露或可能取得权限。注意：
    造成此问题的原因是没有正确修复 CVE-2020-27671。(CVE-2020-29040)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 Xen 4.14.x 及更早版本中發現一個問題，其允許 x86 HVM 來賓機 OS 使用者透過差一錯誤，造成拒絕服務 (資料損毀)、資料洩漏或可能取得權限。注意：
    此問題是因為不完整修正 CVE-2020-27671 所致。(CVE-2020-29040)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 4.14.x までの Xen で問題が発見されました。これにより、x86 HVM ゲスト OS ユーザーが、off-by-one のエラーが原因で、サービス拒否 (スタック破損) を引き起こしたり、データ漏洩を引き起こしたり、権限を取得したりする可能性があります。注：
    この問題は、CVE-2020-27671 の不適切な修正によって引き起こされました。(CVE-2020-29040)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in Xen through 4.14.x allowing x86 HVM guest OS users to cause a denial of service     (stack corruption), cause a data leak, or possibly gain privileges because of an off-by-one error. NOTE:
    this issue is caused by an incorrect fix for CVE-2020-27671. (CVE-2020-29040)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
407776	Alpine: xen: security update to 4.13.2-r2	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	high
407776	Alpine: xen: security update to 4.13.2-r2	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	high
424661	Alpine: multiple xen packages: security update to 4.14.0-r3	Tenable Cloud Security	Alpine Linux Local Security Checks	2025/4/4	2026/7/2	high
424661	Alpine: multiple xen packages: security update to 4.14.0-r3	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2025/4/4	2026/7/2	high
407765	Alpine: xen: security update to 4.12.4-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	high
407765	Alpine: xen: security update to 4.12.4-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	high
251124	Linux Distros 未修补的漏洞：CVE-2020-29040	Nessus	Misc.	2025/8/18	2026/7/29	high
251124	Linux Distros 未修補的弱點：CVE-2020-29040	Nessus	Misc.	2025/8/18	2026/7/29	high
251124	Linux Distros のパッチ未適用の脆弱性: CVE-2020-29040	Nessus	Misc.	2025/8/18	2026/7/29	high
251124	Linux Distros Unpatched Vulnerability : CVE-2020-29040	Nessus	Misc.	2025/8/18	2026/7/29	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high