Detections
Analytics
FreeBSD : qemu -- several vulnerabilities (0ac89b39-f829-11db-b55c-000e0c6d38a9)
high Nessus Plugin ID 25129
Synopsis
The remote FreeBSD host is missing one or more security-related updates.Description
The Debian Security Team reports :Several vulnerabilities have been discovered in the QEMU processor emulator, which may lead to the execution of arbitrary code or denial of service. The Common Vulnerabilities and Exposures project identifies the following problems :
CVE-2007-1320Tavis Ormandy discovered that a memory management routine of the Cirrus video driver performs insufficient bounds checking, which might allow the execution of arbitrary code through a heap overflow.
CVE-2007-1321Tavis Ormandy discovered that the NE2000 network driver and the socket code perform insufficient input validation, which might allow the execution of arbitrary code through a heap overflow.
CVE-2007-1322Tavis Ormandy discovered that the 'icebp' instruction can be abused to terminate the emulation, resulting in denial of service.
CVE-2007-1323Tavis Ormandy discovered that the NE2000 network driver and the socket code perform insufficient input validation, which might allow the execution of arbitrary code through a heap overflow.
CVE-2007-1366Tavis Ormandy discovered that the 'aam' instruction can be abused to crash qemu through a division by zero, resulting in denial of service.
Solution
Update the affected packages.See Also
https://lists.debian.org/debian-security-announce/2007/msg00040.html
Plugin Details
Severity: High
ID: 25129
File Name: freebsd_pkg_0ac89b39f82911dbb55c000e0c6d38a9.nasl
Version: 1.24
Type: local
Family: FreeBSD Local Security Checks
Published: 5/2/2007
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.0
CVSS v2
Risk Factor: High
Base Score: 7.2
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:freebsd:freebsd:qemu, p-cpe:/a:freebsd:freebsd:qemu-devel, cpe:/o:freebsd:freebsd
Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info
Patch Publication Date: 5/1/2007
Vulnerability Publication Date: 5/1/2007
Reference Information
CVE: CVE-2007-1320, CVE-2007-1321, CVE-2007-1322, CVE-2007-1366, CVE-2007-2893