The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3800-1 advisory.

    - CVE-2022-26354: Fixed a memory leak due to a missing virtqueue detach on error. (bsc#1198712)
    - CVE-2021-3929: Fixed an use-after-free in nvme DMA reentrancy issue. (bsc#1193880)
    - CVE-2023-0330: Fixed a stack overflow due to a DMA reentrancy issue. (bsc#1207205)
    - CVE-2020-13754: Fixed a DoS due to an OOB access during mmio operations. (bsc#1172382)
    - CVE-2023-3354: Fixed a remote unauthenticated DoS due to an improper I/O watch removal in VNC TLS     handshake. (bsc#1212850)
    - CVE-2023-3180: Fixed a heap buffer overflow in virtio_crypto_sym_op_helper(). (bsc#1213925)
    - CVE-2023-2861: Fixed improper access control on special files in 9pfs (bsc#1212968).
    - CVE-2022-1050: Fixed use-after-free issue in pvrdma_exec_cmd() (bsc#1197653).
    - CVE-2021-3750: Fixed DMA reentrancy issue leads to use-after-free in hcd-ehci (bsc#1190011).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES15: qemu / qemu-arm / qemu-audio-alsa / qemu-audio-oss / qemu-audio-pa / etc (SUSE-SU-2023:3800-1)

high Nessus Plugin ID 182125

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.4 Jun 26, 2026, 4:08 PM Plugin metadata Plugin Feed: 202606261608
Version 1.3 Mar 15, 2024, 11:10 AM IAVM reference Plugin Feed: 202403151110
Version 1.2 Sep 29, 2023, 2:14 PM IAVM reference Plugin Feed: 202309291414
Version 1.1 Sep 28, 2023, 8:23 PM IAVM reference Plugin Feed: 202309282023
Version 1.0 Sep 28, 2023, 10:12 AM New Plugin Feed: 202309281012