A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or malicious actor.

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the guestfs- tools-1.48.2-5.el9 build changelog.

  - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number     of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or     malicious actor. (CVE-2022-2211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the virt-v2v-2.2.0-5.el9 build changelog.

  - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number     of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or     malicious actor. (CVE-2022-2211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:7472 advisory.

  - A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It could     occur in fdctrl_transfer_handler() in hw/block/fdc.c while processing DMA read data transfers from the     floppy drive to the guest system. A privileged guest user could use this flaw to crash the QEMU process on     the host resulting in DoS scenario, or potential information leakage from the host memory. (CVE-2021-3507)

  - A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to     acquire the driver->nwfilters mutex before iterating over virNWFilterObj instances. There was no     protection to stop another thread from concurrently modifying the driver->nwfilters object. This flaw     allows a malicious, unprivileged user to exploit this issue via libvirt's API virConnectNumOfNWFilters to     crash the network filter management daemon (libvirtd/virtnwfilterd). (CVE-2022-0897)

  - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number     of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or     malicious actor. (CVE-2022-2211)

  - swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface. Versions     prior to 0.5.3, 0.6.2, and 0.7.1 are vulnerable to out-of-bounds read. A specially crafted header of     swtpm's state, where the blobheader's hdrsize indicator has an invalid value, may cause an out-of-bounds     access when the byte array representing the state of the TPM is accessed. This will likely crash swtpm or     prevent it from starting since the state cannot be understood. Users should upgrade to swtpm v0.5.3,     v0.6.2, or v0.7.1 to receive a patch. There are currently no known workarounds. (CVE-2022-23645)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7968 advisory.

  - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number     of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or     malicious actor. (CVE-2022-2211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7958 advisory.

  - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number     of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or     malicious actor. (CVE-2022-2211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7959 advisory.

  - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number     of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or     malicious actor. (CVE-2022-2211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:4308-1 advisory.

  - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number     of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or     malicious actor. (CVE-2022-2211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7958 advisory.

  - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number     of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or     malicious actor. (CVE-2022-2211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7968 advisory.

  - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number     of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or     malicious actor. (CVE-2022-2211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7959 advisory.

  - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number     of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or     malicious actor. (CVE-2022-2211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:7958 advisory.

  - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number     of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or     malicious actor. (CVE-2022-2211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:7959 advisory.

  - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number     of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or     malicious actor. (CVE-2022-2211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:7968 advisory.

  - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number     of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or     malicious actor. (CVE-2022-2211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7968 advisory.

  - libguestfs: Buffer overflow in get_keys leads to DoS (CVE-2022-2211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7958 advisory.

  - libguestfs: Buffer overflow in get_keys leads to DoS (CVE-2022-2211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7959 advisory.

  - libguestfs: Buffer overflow in get_keys leads to DoS (CVE-2022-2211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-7472 advisory.

  - swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface. Versions     prior to 0.5.3, 0.6.2, and 0.7.1 are vulnerable to out-of-bounds read. A specially crafted header of     swtpm's state, where the blobheader's hdrsize indicator has an invalid value, may cause an out-of-bounds     access when the byte array representing the state of the TPM is accessed. This will likely crash swtpm or     prevent it from starting since the state cannot be understood. Users should upgrade to swtpm v0.5.3,     v0.6.2, or v0.7.1 to receive a patch. There are currently no known workarounds. (CVE-2022-23645)

  - A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It could     occur in fdctrl_transfer_handler() in hw/block/fdc.c while processing DMA read data transfers from the     floppy drive to the guest system. A privileged guest user could use this flaw to crash the QEMU process on     the host resulting in DoS scenario, or potential information leakage from the host memory. (CVE-2021-3507)

  - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number     of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or     malicious actor. (CVE-2022-2211)

  - A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to     acquire the driver->nwfilters mutex before iterating over virNWFilterObj instances. There was no     protection to stop another thread from concurrently modifying the driver->nwfilters object. This flaw     allows a malicious, unprivileged user to exploit this issue via libvirt's API virConnectNumOfNWFilters to     crash the network filter management daemon (libvirtd/virtnwfilterd). (CVE-2022-0897)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:7472 advisory.

  - A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It could     occur in fdctrl_transfer_handler() in hw/block/fdc.c while processing DMA read data transfers from the     floppy drive to the guest system. A privileged guest user could use this flaw to crash the QEMU process on     the host resulting in DoS scenario, or potential information leakage from the host memory. (CVE-2021-3507)

  - A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to     acquire the driver->nwfilters mutex before iterating over virNWFilterObj instances. There was no     protection to stop another thread from concurrently modifying the driver->nwfilters object. This flaw     allows a malicious, unprivileged user to exploit this issue via libvirt's API virConnectNumOfNWFilters to     crash the network filter management daemon (libvirtd/virtnwfilterd). (CVE-2022-0897)

  - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number     of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or     malicious actor. (CVE-2022-2211)

  - swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface. Versions     prior to 0.5.3, 0.6.2, and 0.7.1 are vulnerable to out-of-bounds read. A specially crafted header of     swtpm's state, where the blobheader's hdrsize indicator has an invalid value, may cause an out-of-bounds     access when the byte array representing the state of the TPM is accessed. This will likely crash swtpm or     prevent it from starting since the state cannot be understood. Users should upgrade to swtpm v0.5.3,     v0.6.2, or v0.7.1 to receive a patch. There are currently no known workarounds. (CVE-2022-23645)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7472 advisory.

  - QEMU: fdc: heap buffer overflow in DMA read data transfers (CVE-2021-3507)

  - libvirt: missing locking in nwfilterConnectNumOfNWFilters can lead to denial of service (CVE-2022-0897)

  - libguestfs: Buffer overflow in get_keys leads to DoS (CVE-2022-2211)

  - swtpm: Unchecked header size indicator against expected size (CVE-2022-23645)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:7472 advisory.

  - QEMU: fdc: heap buffer overflow in DMA read data transfers (CVE-2021-3507)

  - libvirt: missing locking in nwfilterConnectNumOfNWFilters can lead to denial of service (CVE-2022-0897)

  - libguestfs: Buffer overflow in get_keys leads to DoS (CVE-2022-2211)

  - swtpm: Unchecked header size indicator against expected size (CVE-2022-23645)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2581-1 advisory.

  - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number     of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or     malicious actor. (CVE-2022-2211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
191239	CentOS 9 : guestfs-tools-1.48.2-5.el9	Nessus	CentOS Local Security Checks	medium
191167	CentOS 9 : virt-v2v-2.2.0-5.el9	Nessus	CentOS Local Security Checks	medium
184779	Rocky Linux 8 : virt:rhel and virt-devel:rhel (RLSA-2022:7472)	Nessus	Rocky Linux Local Security Checks	medium
184475	Rocky Linux 9 : virt-v2v (RLSA-2022:7968)	Nessus	Rocky Linux Local Security Checks	medium
170705	Rocky Linux 9 : libguestfs (RLSA-2022:7958)	Nessus	Rocky Linux Local Security Checks	medium
170703	Rocky Linux 9 : guestfs-tools (RLSA-2022:7959)	Nessus	Rocky Linux Local Security Checks	medium
168332	SUSE SLES15 Security Update : virt-v2v (SUSE-SU-2022:4308-1)	Nessus	SuSE Local Security Checks	medium
168109	Oracle Linux 9 : libguestfs (ELSA-2022-7958)	Nessus	Oracle Linux Local Security Checks	medium
168101	Oracle Linux 9 : virt-v2v (ELSA-2022-7968)	Nessus	Oracle Linux Local Security Checks	medium
168056	Oracle Linux 9 : guestfs-tools (ELSA-2022-7959)	Nessus	Oracle Linux Local Security Checks	medium
167974	AlmaLinux 9 : libguestfs (ALSA-2022:7958)	Nessus	Alma Linux Local Security Checks	medium
167967	AlmaLinux 9 : guestfs-tools (ALSA-2022:7959)	Nessus	Alma Linux Local Security Checks	medium
167965	AlmaLinux 9 : virt-v2v (ALSA-2022:7968)	Nessus	Alma Linux Local Security Checks	medium
167623	RHEL 9 : virt-v2v (RHSA-2022:7968)	Nessus	Red Hat Local Security Checks	medium
167595	RHEL 9 : libguestfs (RHSA-2022:7958)	Nessus	Red Hat Local Security Checks	medium
167578	RHEL 9 : guestfs-tools (RHSA-2022:7959)	Nessus	Red Hat Local Security Checks	medium
167524	Oracle Linux 8 : virt:ol / and / virt-devel:ol (ELSA-2022-7472)	Nessus	Oracle Linux Local Security Checks	medium
167461	AlmaLinux 8 : virt:rhel and virt-devel:rhel (ALSA-2022:7472)	Nessus	Alma Linux Local Security Checks	medium
167183	CentOS 8 : virt:rhel and virt-devel:rhel (CESA-2022:7472)	Nessus	CentOS Local Security Checks	medium
167145	RHEL 8 : virt:rhel and virt-devel:rhel (RHSA-2022:7472)	Nessus	Red Hat Local Security Checks	medium
163578	SUSE SLED15 / SLES15 Security Update : libguestfs (SUSE-SU-2022:2581-1)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2022-2211

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium