The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2425 advisory.

    KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on a variety of     architectures. The qemu-kvm-rhev packages provide the user-space component for running virtual machines     that use KVM in environments managed by Red Hat products.

    Security Fix(es):

    * QEMU: slirp: heap buffer overflow in tcp_emu() (CVE-2019-6778)

    * QEMU: rtl8139: integer overflow leads to buffer overflow (CVE-2018-17958)

    * QEMU: net: ignore packets with large size (CVE-2018-17963)

    * QEMU: seccomp: blacklist is not applied to all threads (CVE-2018-15746)

    * QEMU: scsi-generic: possible OOB access while handling inquiry request (CVE-2019-6501)

    * QEMU: slirp: information leakage in tcp_emu() due to uninitialized stack variables (CVE-2019-9824)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * Update qemu-kvm-rhev for RHEL 7.7 compatibility [OSP-14] (BZ#1728358)

    * Update qemu-kvm-rhev for RHEL 7.7 compatibility [OSP-13] (BZ#1728359)

    * Update qemu-kvm-rhev for RHEL 7.7 compatibility [OSP-10] (BZ#1728360)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for qemu fixes the following issues :

  - CVE-2020-7039: Fixed a heap buffer overflow in tcp_emu()     routine while emulating IRC and other protocols     (bsc#1161066).

  - CVE-2019-15034: Fixed a buffer overflow in     hw/display/bochs-display.c due to improper PCI config     space allocation (bsc#1166379).

  - CVE-2020-1711: Fixed an out of bounds heap buffer access     iscsi_co_block_status() routine which could have allowed     a remote denial of service or arbitrary code with     privileges of the QEMU process on the host     (bsc#1166240).

  - CVE-2019-6778: Fixed a heap buffer overflow in tcp_emu()     routine while emulating the identification protocol and     copying message data to a socket buffer (bsc#1123156).

  - CVE-2020-8608: Fixed a heap buffer overflow in tcp_emu()     routine while emulating IRC and other protocols     (bsc#1163018).

  - CVE-2019-20382: Fixed a memory leak in the VNC display     driver which could have led to exhaustion of the host     memory leading to a potential Denial of service     (bsc#1165776).

  - Fixed a live migration error (bsc#1154790).

  - Fixed an issue where migrating VMs on KVM gets missing     features:ospke error (bsc#1162729).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

This update for qemu fixes the following issues :

Security issues fixed :

CVE-2019-6778: Fixed a heap buffer overflow issue in the SLiRP networking implementation (bsc#1123156).

CVE-2018-19489: Fixed a denial of service vulnerability in virtfs (bsc#1117275).

CVE-2018-19364: Fixed a use-after-free if the virtfs interface resulting in a denial of service (bsc#1116717).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for qemu fixes the following issues :

CVE-2020-7039: Fixed a heap buffer overflow in tcp_emu() routine while emulating IRC and other protocols (bsc#1161066).

CVE-2019-15034: Fixed a buffer overflow in hw/display/bochs-display.c due to improper PCI config space allocation (bsc#1166379).

CVE-2020-1711: Fixed an out of bounds heap buffer access iscsi_co_block_status() routine which could have allowed a remote denial of service or arbitrary code with privileges of the QEMU process on the host (bsc#1166240).

CVE-2019-6778: Fixed a heap buffer overflow in tcp_emu() routine while emulating the identification protocol and copying message data to a socket buffer (bsc#1123156).

CVE-2020-8608: Fixed a heap buffer overflow in tcp_emu() routine while emulating IRC and other protocols (bsc#1163018).

CVE-2019-20382: Fixed a memory leak in the VNC display driver which could have led to exhaustion of the host memory leading to a potential Denial of service (bsc#1165776).

Fixed live migration errors (bsc#1154790, bsc#1156794, bsc#1156642).

Fixed an issue where migrating VMs on KVM gets missing features:ospke error (bsc#1162729).

Fixed an issue where booting up a guest system with mdev passthrough device as installation device was failing (bsc#1158880).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for xen fixes the following issues :

Security issues fixed :

CVE-2018-18849: Fixed an out of bounds memory access issue that was found in the LSI53C895A SCSI Host Bus Adapter emulation while writing a message in lsi_do_msgin. It could occur during migration if the 'msg_len' field has an invalid value. A user/process could use this flaw to crash the Qemu process resulting in DoS (bsc#1114423).

CVE-2018-19967: Fixed HLE constructs that allowed guests to lock up the host, resulting in a Denial of Service (DoS). (XSA-282) (bsc#1114988)

CVE-2018-19665: Fixed an integer overflow in Bluetooth routines allows memory corruption (bsc#1117756).

CVE-2018-18438: Fixed an integer overflow in ccid_card_vscard_read function which allows memory corruption (bsc#1112188).

CVE-2018-17962: Fixed a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used (bsc#1111011).

Fixed an issue which could allow a malicious unprivileged guest userspace process to escalate its privilege to that of other userspace processes in the same guest and potentially thereby to that of the guest operating system (bsc#1126201).

CVE-2018-19961 CVE-2018-19962: Fixed insufficient TLB flushing / improper large page mappings with AMD IOMMUs (XSA-275)(bsc#1115040).

CVE-2018-17963: Fixed qemu_deliver_packet_iov in net/net.c that accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service or possibly have unspecified other impact.
(bsc#1111014)

Fixed an issue which could allow an untrusted PV domain with access to a physical device to DMA into its own pagetables leading to privilege escalation (bsc#1126195).

Fixed an issue which could allow a malicious or buggy x86 PV guest kernels can mount a Denial of Service attack affecting the whole system (bsc#1126196)

CVE-2018-17958: Fixed a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer data type is used (bsc#1111007).

CVE-2018-10839: Fixed an integer overflow which could lead to a buffer overflow issue (bsc#1110924).

CVE-2019-6778: Fixed a heap buffer overflow in tcp_emu() found in slirp (bsc#1123157).

CVE-2018-19966: Fixed issue introduced by XSA-240 that could have caused conflicts with shadow paging (XSA-280)(bsc#1115047).

CVE-2017-13672: Fixed an out of bounds read access during display update (bsc#1056336).

Fixed multiple access violations introduced by XENMEM_exchange hypercall which could allow a single PV guest to leak arbitrary amounts of memory, leading to a denial of service (bsc#1126192).

Fixed an issue which could allow malicious or buggy guests with passed through PCI devices to be able to escalate their privileges, crash the host, or access data belonging to other guests. Additionally memory leaks were also possible (bsc#1126140).

Fixed a race condition issue which could allow malicious PV guests to escalate their privilege to that of the hypervisor (bsc#1126141).

CVE-2019-9824: Fixed an information leak in SLiRP networking implementation which could allow a user/process to read uninitialised stack memory contents (bsc#1129623).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for kvm fixes the following issues :

Security issues fixed :

CVE-2019-6778: Fixed a heap buffer overflow issue in the SLiRP networking implementation (bsc#1123156).

CVE-2018-19489: Fixed a denial of service vulnerability in virtfs (bsc#1117275).

CVE-2018-19364: Fixed a use-after-free if the virtfs interface resulting in a denial of service (bsc#1116717).

Non-security issue fixed: Fixed LAPIC TSC deadline timer save/restore (bsc#1109544)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
193989	RHEL 7 : qemu-kvm-rhev (RHSA-2019:2425)	Nessus	Red Hat Local Security Checks	4/27/2024	11/6/2024	critical
135265	openSUSE Security Update : qemu (openSUSE-2020-468)	Nessus	SuSE Local Security Checks	4/7/2020	3/19/2024	high
122397	SUSE SLES12 Security Update : qemu (SUSE-SU-2019:0457-1)	Nessus	SuSE Local Security Checks	2/22/2019	6/18/2024	high
135169	SUSE SLES12 Security Update : qemu (SUSE-SU-2020:0845-1)	Nessus	SuSE Local Security Checks	4/2/2020	5/13/2022	high
123633	SUSE SLES12 Security Update : xen (SUSE-SU-2019:0825-1)	Nessus	SuSE Local Security Checks	4/2/2019	6/6/2024	critical
122313	SUSE SLES11 Security Update : kvm (SUSE-SU-2019:13962-1)	Nessus	SuSE Local Security Checks	2/19/2019	6/19/2024	high

Detections

Analytics

Plugins Search

critical

high

high

high

critical

high