The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4296 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4296-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/               Santiago Ruano Rincn     September 08, 2025                            https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : qemu     Version        : 1:5.2+dfsg-11+deb11u5     CVE ID         : CVE-2024-7409     Debian Bug     : 1111844

    Two security issues were discovered in QEMU, a fast processor     emulator, that could result in denial of service and privilege escalation.

    CVE-2024-7409

        Denial of service (DoS) in the NBD server via improper         synchronization during socket closure

    This update removes the usage of the C (Credential) flag for the     binfmt_misc registration within the qemu-user-static (and     qemu-user-binfmt) packages, as it allowed for privilege escalation when     running a suid/sgid binary under qemu-user.  This means suid/sgid     foreign-architecture binaries are not running with elevated privileges     under qemu-user anymore.  If you relied on this behavior of qemu-user in     the past (running suid/sgid foreign-arch binaries), this will require     changes to your deployment.

    In Bullseye the affected packages are qemu-user-static (and     qemu-user-binfmt).

    For Debian 11 bullseye, these problems have been fixed in version     1:5.2+dfsg-11+deb11u5.

    We recommend that you upgrade your qemu packages.

    For the detailed security status of qemu please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/qemu

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3744-1 advisory.

    Security fixes:

    - CVE-2024-8354: Fixed assertion failure in usb_ep_get() (bsc#1230834)
    - CVE-2024-8612: Fixed information leak in virtio devices (bsc#1230915)

    Update version to 8.2.7:

    Security fixes:

    - CVE-2024-7409: Fixed denial of service via improper synchronization in QEMU NBD Server during socket     closure (bsc#1229007)
    - CVE-2024-4693: Fixed improper release of configure vector in virtio-pci that lead to guest triggerable     crash (bsc#1224132)

    Other fixes:

    - added missing fix for ppc64 emulation that caused corruption in userspace (bsc#1230140)
    - target/ppc: Fix lxvx/stxvx facility check (bsc#1229929)
    - accel/kvm: check for KVM_CAP_READONLY_MEM on VM (bsc#1231519)

    Full changelog here:

    https://lore.kernel.org/qemu-devel/d9ff276f-f1ba-4e90-8343-a7a0dc2bf305@tls.msk.ru/

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

远程 Redhat Enterprise Linux 8 主机上安装的程序包受到 RHSA-2024:6964 公告中提及的多个漏洞的影响。

    基于内核的虚拟机 (KVM) 为多个硬件平台上的 Linux 提供完整的虚拟解决方案。virt:rhel 模块包含的程序包提供用于使用 KVM 运行虚拟机的用户空间组件。这些程序包还提供用于管理虚拟化系统并与之交互的 API。

    安全修复：

    * QEMU：virtio：DMA 可重入问题导致双重释放漏洞 (CVE-2024-3446)

    * QEMU：在套接字关闭期间，QEMU NBD 服务器中未正确同步导致拒绝服务 (CVE-2024-7409)

    * libnbd：NBD 伺服器的证书验证不当问题 (CVE-2024-7383)

    有关上述安全问题的更多详细信息，包括其影响、CVSS 得分、致谢，以及其他相关信息，请参阅列于“参考”部分的 CVE 页面。

Tenable 已直接从 Red Hat Enterprise Linux 安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Debian 11 主机上存在安装的程序包该程序包受到 dla-4296 公告中提及的漏洞的影响。

    -------------------------------------------------- ----------------------- Debian LTS 公告 DLA-4296-1 debian-lts@lists.debian.org https://www.debian.org/lts/security/Santiago Ruano Rincn 2025 年 9 月 8 日 https://wiki.debian.org/LTS-------------------------------------------------------------------------

    程序包qemu 版本 1:5.2+dfsg-11+deb11u5 CVE ID CVE-2024-7409 Debian 缺陷1111844

    快速处理器仿真器 QEMU 中发现两个安全问题可导致拒绝服务和权限升级。

    CVE-2024-7409

        在 套接字关闭期间通过不当同步在 NBD 服务器中造成拒绝服务 (DoS)

    此更新删除了 qemu-user-static和 qemu-user-binfmt 程序包中 binfmt_misc 注册的 C凭据标记的使用因为它允许在 qemu-user 下运行 suid/sgid 二进制时进行权限升级。这表示 suid/sgid foreign-architecture 二进制文件不再以提升的权限在 qemu-user 下运行。如果您过去依赖 qemu-user 的此行为运行 suid/sgid Foreign-arch 二进制文件这将需要更改您的部署。

    在 Bullseye 中受影响的程序包为 qemu-user-static和 qemu-user-binfmt。

    对于 Debian 11 Bullseye这些问题已在版本 1:5.2+dfsg-11+deb11u5 中修复。

    我们建议您升级 qemu 程序包。

    如需了解 qemu 的详细安全状态，请参阅其安全跟踪页面：
    https://security-tracker.debian.org/tracker/qemu

    有关 Debian LTS 安全公告、如何将这些更新应用到系统以及常见问题解答的更多信息，请访问以下网址：https://wiki.debian.org/LTSAttachment:signature.ascDescription: PGP signature

Tenable 已直接从 Debian 安全公告中提取上述描述块。

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Oracle Linux 8 主机上安装的程序包受到 ELSA-2024-6964 公告中提及的多个漏洞影响。

    - 修复 CVE-2024-7383 NBD 服务器不正确的证书验证，解决：RHEL-52728

    libtpms libvirt libvirt-dbus libvirt-python nbdkit netcf perl-Sys-Virt qemu-kvm
    - kvm-nbd-server-CVE-2024-7409-Avoid-use-after-free-when-c.patch [RHEL-52611]

Tenable 已直接从 Oracle Linux 安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

ID	Name	Product	Family	Published	Updated	Severity
261821	Debian dla-4296 : qemu - security update	Nessus	Debian Local Security Checks	9/9/2025	9/9/2025	high
209545	SUSE SLES15 Security Update : qemu (SUSE-SU-2024:3744-1)	Nessus	SuSE Local Security Checks	10/23/2024	11/15/2024	low
210525	RHEL 8：virt:rhel 和 virt-devel:rhel (RHSA-2024:6964)	Nessus	Red Hat Local Security Checks	11/7/2024	4/29/2025	high
261821	Debian dla-4296qemu - 安全更新	Nessus	Debian Local Security Checks	9/9/2025	9/9/2025	high
207772	Oracle Linux 8：virt:ol / 和 / virt-devel:rhel (ELSA-2024-6964)	Nessus	Oracle Linux Local Security Checks	9/25/2024	9/11/2025	high

Detections

Analytics

Plugins Search

high

low

high

high

high