There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - A heap-based buffer overflow was found in QEMU through 5.0.0 in the SDHCI device emulation support. It
    could occur while doing a multi block SDMA transfer via the sdhci_sdma_transfer_multi_blocks() routine in
    hw/sd/sdhci.c. A guest user or process could use this flaw to crash the QEMU process on the host,
    resulting in a denial of service condition, or potentially execute arbitrary code with privileges of the
    QEMU process on the host. (CVE-2020-17380)

  - In QEMU 5.0.0 and earlier, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame
    count, which allows guest OS users to trigger an out-of-bounds access during an es1370_write() operation.
    (CVE-2020-13361)

  - In QEMU 5.0.0 and earlier, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a
    crafted reply_queue_head field from a guest OS user. (CVE-2020-13362)

  - An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before
    5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its
    'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the
    QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the
    privileges of the QEMU process on the host. (CVE-2020-14364)

  - hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This
    occurs during packet transmission and affects the highbank and midway emulated machines. A guest user or
    process could use this flaw to crash the QEMU process on the host, resulting in a denial of service or
    potential privileged code execution. This was fixed in commit 5519724a13664b43e225ca05351c60b4468e4555.
    (CVE-2020-15863)

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 QEMU 5.0.0 的 hw/block/fdc.c 中，fdctrl_write_data 透過目前磁碟機的 NULL 區塊指標，發生 NULL 指標解除參照。 (CVE-2020-25741)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 QEMU 5.0.0 中的 hw/block/fdc.c 中，fdctrl_write_data 存在通过当前驱动器的空区块指针导致的空指针取消引用。 (CVE-2020-25741)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - QEMU 5.0.0 の hw/block/fdc.c の fdctrl_write_data には、現在のドライブの NULL ブロックポインターを介した NULL ポインターデリファレンスがあります。 （CVE-2020-25741）

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - fdctrl_write_data in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block pointer     for the current drive. (CVE-2020-25741)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
406788	Alpine: multiple qemu packages: security update to 5.1.0-r1	Tenable Cloud Security	Alpine Linux Local Security Checks	10/31/2023	7/2/2026	medium
406788	Alpine: multiple qemu packages: security update to 5.1.0-r1	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	10/31/2023	7/2/2026	medium
229930	Linux Distros 未修補弱點：CVE-2020-25741	Nessus	Misc.	3/5/2025	6/2/2026	low
229930	Linux Distros 未修补的漏洞: CVE-2020-25741	Nessus	Misc.	3/5/2025	6/2/2026	low
229930	Linux Distros のパッチ未適用の脆弱性: CVE-2020-25741	Nessus	Misc.	3/5/2025	6/2/2026	low
229930	Linux Distros Unpatched Vulnerability : CVE-2020-25741	Nessus	Misc.	3/5/2025	6/2/2026	low

Detections

Analytics

Plugins Search

medium

medium

low

low

low

low