The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4191 advisory.

  - QEMU: net: e1000e: use-after-free while sending packets (CVE-2020-15859)

  - QEMU: slirp: invalid pointer initialization may lead to information disclosure (bootp) (CVE-2021-3592)

  - QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp6) (CVE-2021-3593)

  - QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp) (CVE-2021-3594)

  - QEMU: slirp: invalid pointer initialization may lead to information disclosure (tftp) (CVE-2021-3595)

  - libvirt: Insecure sVirt label generation (CVE-2021-3631)

  - libvirt: Improper locking on ACL failure in virStoragePoolLookupByTargetPath API (CVE-2021-3667)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 8 : virt:rhel and virt-devel:rhel (RHSA-2021:4191)

medium Nessus Plugin ID 155110

Version 1.7

Version 1.6

Version 1.7 Nov 24, 2023, 1:42 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202311241342
Version 1.6 Jan 23, 2023, 7:12 PM Logic Changes (Added support for repository relative URLs) Plugin Feed: 202301231912