Detections
Analytics
EulerOS Virtualization 2.12.0 : qemu (EulerOS-SA-2026-2802)
medium Nessus Plugin ID 328572
Synopsis
The remote EulerOS Virtualization host is missing multiple security updates.Description
According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callback firing later on and triggering a use-after- free in the use of the channel. This can be abused by a malicious client with network access to the VNC WebSocket port to cause a denial of service during the WebSocket handshake prior to the VNC client authentication.(CVE-2025-11234)
A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the AKCIPHER path, leading to uncontrolled memory allocation. This can result in a denial of service (DoS) on the host system by causing the QEMU process to terminate unexpectedly.(CVE-2025-14876)
A flaw was found in QEMU. A specially crafted VMDK image could trigger an out-of-bounds read vulnerability, potentially leading to a 12-byte leak of sensitive information or a denial of service condition (DoS).(CVE-2026-2243)
Tenable has extracted the preceding description block directly from the EulerOS Virtualization qemu security advisory.
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Update the affected qemu packages.See Also
Plugin Details
Severity: Medium
ID: 328572
File Name: EulerOS_SA-2026-2802.nasl
Version: 1.1
Type: Local
Family: Huawei Local Security Checks
Published: 7/21/2026
Updated: 7/21/2026
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5
Percentile: 94.89
CVSS v2
Risk Factor: Low
Base Score: 3.6
Temporal Score: 2.7
Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:P
CVSS Score Source: CVE-2026-2243
CVSS v3
Risk Factor: Medium
Base Score: 5.1
Temporal Score: 4.5
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:huawei:euleros:uvp:2.12.0, p-cpe:/a:huawei:euleros:qemu-6.2.0.oe2203sp1, p-cpe:/a:huawei:euleros:qemu-gpu-specs-6.2.0.oe2203sp1, p-cpe:/a:huawei:euleros:qemu-img-6.2.0.oe2203sp1
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/EulerOS/release, Host/EulerOS/rpm-list, Host/EulerOS/uvp_version
Exploit Ease: No known exploits are available
Patch Publication Date: 7/20/2026
Vulnerability Publication Date: 10/3/2025