The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3721-1 advisory.

    - CVE-2022-26354: Fixed a memory leak due to a missing virtqueue detach on error. (bsc#1198712)
    - CVE-2021-3929: Fixed an use-after-free in nvme DMA reentrancy issue. (bsc#1193880)
    - CVE-2023-0330: Fixed a stack overflow due to a DMA reentrancy issue. (bsc#1207205)
    - CVE-2020-13754: Fixed a DoS due to an OOB access during mmio operations. (bsc#1172382)
    - CVE-2023-3354: Fixed a remote unauthenticated DoS due to an improper I/O watch removal in VNC TLS     handshake. (bsc#1212850)
    - CVE-2023-3180: Fixed a heap buffer overflow in virtio_crypto_sym_op_helper(). (bsc#1213925)
    - CVE-2021-3638: Fixed an out-of-bounds write due to an inconsistent check in ati_2d_blt(). (bsc#1188609)
    - CVE-2021-3750: Fixed an use-after-free in DMA reentrancy issue. (bsc#1190011)
    - CVE-2023-2861: Fixed improper access control on special files in 9pfs (bsc#1212968).
    - CVE-2022-1050: Fixed use-after-free issue in pvrdma_exec_cmd() (bsc#1197653).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES15: qemu / qemu-arm / qemu-audio-alsa / qemu-audio-pa / qemu-block-curl / etc (SUSE-SU-2023:3721-1)

high Nessus Plugin ID 181777

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.4 Jun 26, 2026, 4:08 PM Plugin metadata Plugin Feed: 202606261608
Version 1.3 Mar 15, 2024, 11:10 AM IAVM reference Plugin Feed: 202403151110
Version 1.2 Sep 29, 2023, 2:14 PM IAVM reference Plugin Feed: 202309291414
Version 1.1 Sep 28, 2023, 8:23 PM IAVM reference Plugin Feed: 202309282023
Version 1.0 Sep 22, 2023, 10:05 AM New Plugin Feed: 202309221005