The version of qemu / qemu-kvm installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3872 advisory.

  - An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the     Buffer Data Port Register in sdhci_read_dataport and sdhci_write_dataport, respectively, if data_count ==     block_size. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a     denial of service condition. (CVE-2022-3872)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

リモート Azure Linux 3.0 ホストにインストールされている qemu / qemu-kvm のバージョンは、テスト済みのバージョンより前です。したがって、CVE-2022-3872 のアドバイザリに記載されている脆弱性の影響を受けます。

  - QEMU の SDHCI デバイスで off-by-one 読み取り/書き込みの問題が見つかりました。これは、data_count == block_size の場合に、sdhci_read_dataport と sdhci_write_dataport でバッファデータポートレジスタを読み書きする際に発生します。悪意のあるゲストがこの欠陥を利用して、ホスト上の QEMU プロセスをクラッシュさせ、サービス拒否状態を引き起こす可能性があります。(CVE-2022-3872)

Nessus はこの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

The version of qemu / qemu-kvm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3872 advisory.

  - An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the     Buffer Data Port Register in sdhci_read_dataport and sdhci_write_dataport, respectively, if data_count ==     block_size. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a     denial of service condition. (CVE-2022-3872)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the qemu-kvm package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the     Buffer Data Port Register in sdhci_read_dataport and sdhci_write_dataport, respectively, if data_count ==     block_size. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a     denial of service condition. (CVE-2022-3872)

  - An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The qxl_phys2virt()     function does not check the size of the structure pointed to by the guest physical address, potentially     reading past the end of the bar space into adjacent pages. A malicious guest user could use this flaw to     crash the QEMU process on the host causing a denial of service condition. (CVE-2022-4144)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

遠端 Azure Linux 3.0 主機上安裝的 qemu / qemu-kvm 版本比測試版本舊。因此，此版本會受到 CVE-2022-3872 公告中提及的一個弱點影響。

  - 在 QEMU 的 SDHCI 裝置中發現一個差一讀取/寫入問題。如果 data_count == block_size在 sdhci_read_dataport 和 sdhci_write_dataport 中讀取/寫入緩衝區資料連接埠暫存器時就會發生此問題。惡意來賓可能會利用此缺陷造成主機上的 QEMU 處理程序損毀，進而導致拒絕服務。(CVE-2022-3872)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 QEMU 的 SDHCI 设备中发现差一读取/写入问题。如果 data_count == block_size则在分别读取/写入 sdhci_read_dataport 和 sdhci_write_dataport 中的缓冲区数据端口寄存器时会发生此问题。恶意访客可利用此缺陷造成主机上的 QEMU 进程崩溃，从而导致拒绝服务情形。(CVE-2022-3872)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of     the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process     on the host, resulting in a denial of service. (CVE-2020-14394)

  - A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It could     occur in fdctrl_transfer_handler() in hw/block/fdc.c while processing DMA read data transfers from the     floppy drive to the guest system. A privileged guest user could use this flaw to crash the QEMU process on     the host resulting in DoS scenario, or potential information leakage from the host memory. (CVE-2021-3507)

  - A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. A malicious     guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service     condition. The highest threat from this vulnerability is to system availability. This flaw affects QEMU     versions prior to 7.0.0. (CVE-2021-3611)

  - A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the     Buffer Pointer overlaps with its MMIO region when it transfers the USB packets. Crafted content may be     written to the controller's registers and trigger undesirable actions (such as reset) while the device is     still transferring packets. This can ultimately lead to a use-after-free issue. A malicious guest could     use this flaw to crash the QEMU process on the host, resulting in a denial of service condition, or     potentially execute arbitrary code within the context of the QEMU process on the host. This flaw affects     QEMU versions before 7.0.0. (CVE-2021-3750)

  - A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within     the guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service     condition. (CVE-2021-4158)

  - A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursor_alloc()     function can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer     overflow. This flaw allows a malicious privileged guest user to crash the QEMU process on the host or     potentially execute arbitrary code within the context of the QEMU process. (CVE-2021-4206)

  - A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values     `cursor->header.width` and `cursor->header.height` can lead to the allocation of a small cursor object     followed by a subsequent heap-based buffer overflow. A malicious privileged guest user could use this flaw     to crash the QEMU process on the host or potentially execute arbitrary code within the context of the QEMU     process. (CVE-2021-4207)

  - A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The     flaw occurs while processing repeated messages to cancel the current SCSI request via the lsi_do_msgout     function. This flaw allows a malicious privileged user within the guest to crash the QEMU process on the     host, resulting in a denial of service. (CVE-2022-0216)

  - A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is     strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by     virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and     is writable by a user who is not a member of the group. This could allow a malicious unprivileged user     inside the guest to gain access to resources accessible to the root group, potentially escalating their     privileges within the guest. A malicious local user in the host might also leverage this unexpected     executable file created by the guest to escalate their privileges on the host system. (CVE-2022-0358)

  - A flaw was found in the virtio-net device of QEMU. This flaw was inadvertently introduced with the fix for     CVE-2021-3748, which forgot to unmap the cached virtqueue elements on error, leading to memory leakage and     other unexpected results. Affected QEMU version: 6.2.0. (CVE-2022-26353)

  - A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached     from the virtqueue before freeing its memory, leading to memory leakage and other unexpected results.
    Affected QEMU versions <= 6.2.0. (CVE-2022-26354)

  - An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the     extended format. A malicious client could use this flaw to make QEMU unresponsive by sending a specially     crafted payload message, resulting in a denial of service. (CVE-2022-3165)

  - softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path,     leading to an io_readx or io_writex crash. NOTE: a third party states that the Non-virtualization Use Case     in the qemu.org reference applies here, i.e., 'Bugs affecting the non-virtualization use case are not     considered security bugs at this time. (CVE-2022-35414)

  - An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the     Buffer Data Port Register in sdhci_read_dataport and sdhci_write_dataport, respectively, if data_count ==     block_size. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a     denial of service condition. (CVE-2022-3872)

  - An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The qxl_phys2virt()     function does not check the size of the structure pointed to by the guest physical address, potentially     reading past the end of the bar space into adjacent pages. A malicious guest user could use this flaw to     crash the QEMU process on the host causing a denial of service condition. (CVE-2022-4144)

  - A vulnerability in the lsi53c895a device affects the latest version of qemu. A DMA-MMIO reentrancy problem     may lead to memory corruption bugs like stack overflow or use-after-free. (CVE-2023-0330)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

远程 Azure Linux 3.0 主机上安装的 qemu / qemu-kvm 版本低于 测试的 版本。因此，该程序受到 CVE-2022-3872 公告中提及的一个漏洞影响。

  - 在 QEMU 的 SDHCI 设备中发现差一读取/写入问题。如果 data_count == block_size则在分别读取/写入 sdhci_read_dataport 和 sdhci_write_dataport 中的缓冲区数据端口寄存器时会发生此问题。恶意访客可利用此缺陷造成主机上的 QEMU 进程崩溃，从而导致拒绝服务情形。(CVE-2022-3872)

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the     Buffer Data Port Register in sdhci_read_dataport and sdhci_write_dataport, respectively, if data_count ==     block_size. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a     denial of service condition. (CVE-2022-3872)

  - An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The qxl_phys2virt()     function does not check the size of the structure pointed to by the guest physical address, potentially     reading past the end of the bar space into adjacent pages. A malicious guest user could use this flaw to     crash the QEMU process on the host causing a denial of service condition. (CVE-2022-4144)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - QEMU の SDHCI デバイスで off-by-one 読み取り/書き込みの問題が見つかりました。これは、data_count == block_size の場合に、sdhci_read_dataport と sdhci_write_dataport でバッファデータポートレジスタを読み書きする際に発生します。悪意のあるゲストがこの欠陥を利用して、ホスト上の QEMU プロセスをクラッシュさせ、サービス拒否状態を引き起こす可能性があります。(CVE-2022-3872)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 QEMU 的 SDHCI 裝置中發現一個差一讀取/寫入問題。如果 data_count == block_size在 sdhci_read_dataport 和 sdhci_write_dataport 中讀取/寫入緩衝區資料連接埠暫存器時就會發生此問題。惡意來賓可能會利用此缺陷造成主機上的 QEMU 處理程序損毀，進而導致拒絕服務。(CVE-2022-3872)

請注意，Nessus 依賴供應商報告的套件存在。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the     Buffer Data Port Register in sdhci_read_dataport and sdhci_write_dataport, respectively, if data_count ==     block_size. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a     denial of service condition. (CVE-2022-3872)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
215484	Azure Linux 3.0 Security Update: qemu / qemu-kvm (CVE-2022-3872)	Nessus	Azure Linux Local Security Checks	2025/2/10	2025/2/10	high
215484	Azure Linux 3.0 セキュリティ更新qemu / qemu-kvmCVE-2022-3872]	Nessus	Azure Linux Local Security Checks	2025/2/10	2025/2/10	high
172753	CBL Mariner 2.0 Security Update: qemu / qemu-kvm (CVE-2022-3872)	Nessus	MarinerOS Local Security Checks	2023/3/20	2025/2/10	high
174820	EulerOS Virtualization 2.9.1 : qemu-kvm (EulerOS-SA-2023-1651)	Nessus	Huawei Local Security Checks	2023/4/27	2023/4/27	high
215484	Azure Linux 3.0 安全性更新qemu / qemu-kvm (CVE-2022-3872)	Nessus	Azure Linux Local Security Checks	2025/2/10	2025/2/10	high
232075	Linux Distros 未修补的漏洞：CVE-2022-3872	Nessus	Misc.	2025/3/6	2025/8/18	high
176865	EulerOS Virtualization 2.11.1 : qemu (EulerOS-SA-2023-2082)	Nessus	Huawei Local Security Checks	2023/6/7	2024/1/16	high
174839	EulerOS Virtualization 2.9.0 : qemu-kvm (EulerOS-SA-2023-1685)	Nessus	Huawei Local Security Checks	2023/4/27	2023/4/27	high
215484	Azure Linux 3.0 安全更新qemu / qemu-kvm (CVE-2022-3872)	Nessus	Azure Linux Local Security Checks	2025/2/10	2025/2/10	high
175733	EulerOS Virtualization 2.10.0 : qemu (EulerOS-SA-2023-1944)	Nessus	Huawei Local Security Checks	2023/5/15	2023/5/15	high
175739	EulerOS Virtualization 2.10.1 : qemu (EulerOS-SA-2023-1913)	Nessus	Huawei Local Security Checks	2023/5/16	2023/5/16	high
232075	Linux Distros のパッチ未適用の脆弱性: CVE-2022-3872	Nessus	Misc.	2025/3/6	2025/8/18	high
232075	Linux Distros 未修補的弱點：CVE-2022-3872	Nessus	Misc.	2025/3/6	2025/8/18	high
176798	EulerOS Virtualization 2.11.0 : qemu (EulerOS-SA-2023-2134)	Nessus	Huawei Local Security Checks	2023/6/7	2024/1/16	high
232075	Linux Distros Unpatched Vulnerability : CVE-2022-3872	Nessus	Misc.	2025/3/6	2025/8/18	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high