The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible     for requesting information about network interfaces of a running QEMU domain. This flaw affects the polkit     access control driver. Specifically, clients connecting to the read-write socket with limited ACL     permissions could use this flaw to crash the libvirt daemon, resulting in a denial of service, or     potentially escalate their privileges on the system. The highest threat from this vulnerability is to data     confidentiality and integrity as well as system availability. (CVE-2020-25637)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the libvirt package has been released.

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5040 advisory.

  - A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible     for requesting information about network interfaces of a running QEMU domain. This flaw affects the polkit     access control driver. Specifically, clients connecting to the read-write socket with limited ACL     permissions could use this flaw to crash the libvirt daemon, resulting in a denial of service, or     potentially escalate their privileges on the system. The highest threat from this vulnerability is to data     confidentiality and integrity as well as system availability. (CVE-2020-25637)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for libvirt fixes the following issues :

CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros (bsc#1174955).

CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces() (bsc#1177155).

qemu: Adjust max memlock on mdev hotplug (bsc#1177480).

Xen: Don't add dom0 twice on driver reload (bsc#1176430).

Fixed an issue where building was failing (bsc#1175574).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libvirt fixes the following issues :

CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros (bsc#1174955).

CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces() (bsc#1177155).

libxl: Fixed lock manager lock ordering (bsc#1171701).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1762 advisory.

    Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware     platforms. The virt:rhel module contains packages which provide user-space components used to run virtual     machines using KVM. The packages also provide APIs for managing and interacting with the virtualized     systems.

    Security Fix(es):

    * libvirt: double free in qemuAgentGetInterfaces() in qemu_agent.c (CVE-2020-25637)

    * QEMU: heap buffer overflow in msix_table_mmio_write() in hw/pci/msix.c (CVE-2020-27821)

    * QEMU: ide: atapi: OOB access while processing read commands (CVE-2020-29443)

    * QEMU: heap buffer overflow in iscsi_aio_ioctl_cb() in block/iscsi.c may lead to information disclosure     (CVE-2020-11947)

    * QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c     (CVE-2020-16092)

    * QEMU: infinite loop in e1000e_write_packet_to_guest() in hw/net/e1000e_core.c (CVE-2020-25707)

    * QEMU: assertion failure through usb_packet_unmap() in hw/usb/hcd-ehci.c (CVE-2020-25723)

    * QEMU: e1000e: infinite loop scenario in case of null packet descriptor (CVE-2020-28916)

    * QEMU: slirp: out-of-bounds access while processing ARP/NCSI packets (CVE-2020-29129, CVE-2020-29130)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for libvirt fixes the following issues :

  - CVE-2020-15708: Added a note to libvirtd.conf about     polkit auth in SUSE distros (bsc#1174955).
    CVE-2020-25637: Fixed a double free in     qemuAgentGetInterfaces() (bsc#1177155).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
229911	Linux Distros Unpatched Vulnerability : CVE-2020-25637	Nessus	Misc.	3/5/2025	8/6/2026	medium
148349	Photon OS 4.0: Libvirt PHSA-2021-4.0-0007	Nessus	PhotonOS Local Security Checks	4/7/2021	8/22/2025	high
143055	CentOS 7 : libvirt (RHSA-2020:5040)	Nessus	CentOS Local Security Checks	11/18/2020	10/9/2024	medium
143759	SUSE SLES12 Security Update : libvirt (SUSE-SU-2020:3039-1)	Nessus	SuSE Local Security Checks	12/9/2020	5/11/2022	high
143827	SUSE SLES12 Security Update : libvirt (SUSE-SU-2020:3038-1)	Nessus	SuSE Local Security Checks	12/9/2020	5/11/2022	high
149669	RHEL 8 : virt:rhel and virt-devel:rhel (RHSA-2021:1762)	Nessus	Red Hat Local Security Checks	5/19/2021	9/24/2025	medium
143635	SUSE SLES12 Security Update : libvirt (SUSE-SU-2020:3095-1)	Nessus	SuSE Local Security Checks	12/9/2020	5/11/2022	high

Detections

Analytics

Plugins Search

medium

high

medium

high

high

medium

high