The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0397 advisory.

    The Advanced Virtualization module provides the user-space component for running virtual machines that use     KVM in environments managed by Red Hat products.

    Security Fix(es):

    * nbdkit: NBD_OPT_STRUCTURED_REPLY injection on STARTTLS (CVE-2021-3716)

    * QEMU: block: fdc: null pointer dereference may lead to guest crash (CVE-2021-20196)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * There is nbdkit curl error info if convert a guest from VMware without vddk by administrator account     [rhel-av-8.5.z] (BZ#2040778)

    * Fix data corruption in nbdkit-cow-filter and nbdkit-cache-filter [rhel-av-8.5z] (BZ#2040781)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:1759 advisory.

    * QEMU: virtio-net: heap use-after-free in virtio_net_receive_rcu (CVE-2021-3748)

    * ntfs-3g: Out-of-bounds heap buffer access in ntfs_get_attribute_value() due to incorrect check of     bytes_in_use value in MFT records (CVE-2021-33285)

    * ntfs-3g: Heap buffer overflow triggered by a specially crafted Unicode string (CVE-2021-33286)

    * ntfs-3g: Heap buffer overflow in ntfs_attr_pread_i() triggered by specially crafted NTFS attributes     (CVE-2021-33287)

    * ntfs-3g: Heap buffer overflow triggered by a specially crafted MFT section (CVE-2021-33289)

    * ntfs-3g: Heap buffer overflow triggered by a specially crafted NTFS inode pathname (CVE-2021-35266)

    * ntfs-3g: Stack buffer overflow triggered when correcting differences between MFT and MFTMirror sections     (CVE-2021-35267)

    * ntfs-3g: Heap buffer overflow in ntfs_inode_real_open() triggered by a specially crafted NTFS inode     (CVE-2021-35268)

    * ntfs-3g: Heap buffer overflow in ntfs_attr_setup_flag() triggered by a specially crafted NTFS attribute     from MFT (CVE-2021-35269)

    * ntfs-3g: NULL pointer dereference in ntfs_extent_inode_open() (CVE-2021-39251)

    * ntfs-3g: Out-of-bounds read in ntfs_ie_lookup() (CVE-2021-39252)

    * ntfs-3g: Out-of-bounds read in ntfs_runlists_merge_i() (CVE-2021-39253)

    * ntfs-3g: Integer overflow in memmove() leading to heap buffer overflow in ntfs_attr_record_resize()     (CVE-2021-39254)

    * ntfs-3g: Out-of-bounds read ntfs_attr_find_in_attrdef() triggered by an invalid attribute     (CVE-2021-39255)

    * ntfs-3g: Heap buffer overflow in ntfs_inode_lookup_by_name() (CVE-2021-39256)

    * ntfs-3g: Endless recursion from ntfs_attr_pwrite() triggered by an unallocated bitmap (CVE-2021-39257)

    * ntfs-3g: Out-of-bounds reads in ntfs_attr_find() and ntfs_external_attr_find() (CVE-2021-39258)

    * ntfs-3g: Out-of-bounds access in ntfs_inode_lookup_by_name() caused by an unsanitized attribute length     (CVE-2021-39259)

    * ntfs-3g: Out-of-bounds access in ntfs_inode_sync_standard_information() (CVE-2021-39260)

    * ntfs-3g: Heap buffer overflow in ntfs_compressed_pwrite() (CVE-2021-39261)

    * ntfs-3g: Out-of-bounds access in ntfs_decompress() (CVE-2021-39262)

    * ntfs-3g: Heap buffer overflow in ntfs_get_attribute_value() caused by an unsanitized attribute     (CVE-2021-39263)

    * libnbd: nbdcopy: missing error handling may create corrupted destination image (CVE-2022-0485)

    * hivex: stack overflow due to recursive call of _get_children() (CVE-2021-3622)

    * nbdkit: NBD_OPT_STRUCTURED_REPLY injection on STARTTLS (CVE-2021-3716)

    * libvirt: segmentation fault during VM shutdown can lead to vdsm hang (CVE-2021-3975)

    * QEMU: NULL pointer dereference in mirror_wait_on_conflicts() in block/mirror.c (CVE-2021-4145)

    * QEMU: NULL pointer dereference in pci_write() in hw/acpi/pcihp.c (CVE-2021-4158)

    * QEMU: block: fdc: null pointer dereference may lead to guest crash (CVE-2021-20196)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0168 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2021-4206:
    A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursor_alloc()     function can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer     overflow. This flaw allows a malicious privileged guest user to crash the QEMU process on the host or     potentially execute arbitrary code within the context of the QEMU process.

    CVE-2021-4207:
    A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values     `cursor->header.width` and `cursor->header.height` can lead to the allocation of a small cursor object     followed by a subsequent heap-based buffer overflow. A malicious privileged guest user could use this flaw     to crash the QEMU process on the host or potentially execute arbitrary code within the context of the QEMU     process.

    CVE-2022-26353:
    A flaw was found in the virtio-net device of QEMU. This flaw was inadvertently introduced with the fix for     CVE-2021-3748, which forgot to unmap the cached virtqueue elements on error, leading to memory leakage and     other unexpected results. Affected QEMU version: 6.2.0.

    CVE-2021-20196:
    A NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs while     processing read/write ioport commands if the selected floppy drive is not initialized with a block device.
    This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of     service. The highest threat from this vulnerability is to system availability.

    CVE-2021-33285:
    In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute is supplied to the function     ntfs_get_attribute_value, a heap buffer overflow can occur allowing for memory disclosure or denial of     service. The vulnerability is caused by an out-of-bound buffer access which can be triggered by mounting a     crafted ntfs partition. The root cause is a missing consistency check after reading an MFT record : the     bytes_in_use field should be less than the bytes_allocated field. When it is not, the parsing of the     records proceeds into the wild.

    CVE-2021-33286:
    In NTFS-3G versions < 2021.8.22, when a specially crafted unicode string is supplied in an NTFS image a     heap buffer overflow can occur and allow for code execution.

    CVE-2021-33287:
    In NTFS-3G versions < 2021.8.22, when specially crafted NTFS attributes are read in the function     ntfs_attr_pread_i, a heap buffer overflow can occur and allow for writing to arbitrary memory or denial of     service of the application.

    CVE-2021-33289:
    In NTFS-3G versions < 2021.8.22, when a specially crafted MFT section is supplied in an NTFS image a heap     buffer overflow can occur and allow for code execution.

    CVE-2021-35266:
    In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode pathname is supplied in an NTFS image     a heap buffer overflow can occur resulting in memory disclosure, denial of service and even code     execution.

    CVE-2021-35267:
    NTFS-3G versions < 2021.8.22, a stack buffer overflow can occur when correcting differences in the MFT and     MFTMirror allowing for code execution or escalation of privileges when setuid-root.

    CVE-2021-35268:
    In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode is loaded in the function     ntfs_inode_real_open, a heap buffer overflow can occur allowing for code execution and escalation of     privileges.

    CVE-2021-35269:
    NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute from the MFT is setup in the     function ntfs_attr_setup_flag, a heap buffer overflow can occur allowing for code execution and escalation     of privileges.

    CVE-2021-3622:
    A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows     Registry (hive) file, which would cause hivex to recursively call the _get_children() function, leading to     a stack overflow. The highest threat from this vulnerability is to system availability.

    CVE-2021-3716:
    A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption     boundary. A MitM attacker could use this flaw to inject a plaintext NBD_OPT_STRUCTURED_REPLY before     proxying everything else a client sends to the server, potentially leading the client to terminate the NBD     session. The highest threat from this vulnerability is to system availability.

    CVE-2021-3748:
    A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the     descriptor's address belongs to the non direct access region, due to num_buffers being set after the     virtqueue elem has been unmapped. A malicious guest could use this flaw to crash QEMU, resulting in a     denial of service condition, or potentially execute code on the host with the privileges of the QEMU     process.

    CVE-2021-39251:
    A crafted NTFS image can cause a NULL pointer dereference in ntfs_extent_inode_open in NTFS-3G <     2021.8.22.

    CVE-2021-39252:
    A crafted NTFS image can cause an out-of-bounds read in ntfs_ie_lookup in NTFS-3G < 2021.8.22.

    CVE-2021-39253:
    A crafted NTFS image can cause an out-of-bounds read in ntfs_runlists_merge_i in NTFS-3G < 2021.8.22.

    CVE-2021-39254:
    A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in     the function ntfs_attr_record_resize, in NTFS-3G < 2021.8.22.

    CVE-2021-39255:
    A crafted NTFS image can trigger an out-of-bounds read, caused by an invalid attribute in     ntfs_attr_find_in_attrdef, in NTFS-3G < 2021.8.22.

    CVE-2021-39256:
    A crafted NTFS image can cause a heap-based buffer overflow in ntfs_inode_lookup_by_name in NTFS-3G <     2021.8.22.

    CVE-2021-39257:
    A crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call chain     (starting from ntfs_attr_pwrite), causing stack consumption in NTFS-3G < 2021.8.22.

    CVE-2021-39258:
    A crafted NTFS image can cause out-of-bounds reads in ntfs_attr_find and ntfs_external_attr_find in     NTFS-3G < 2021.8.22.

    CVE-2021-39259:
    A crafted NTFS image can trigger an out-of-bounds access, caused by an unsanitized attribute length in     ntfs_inode_lookup_by_name, in NTFS-3G < 2021.8.22.

    CVE-2021-39260:
    A crafted NTFS image can cause an out-of-bounds access in ntfs_inode_sync_standard_information in NTFS-3G     < 2021.8.22.

    CVE-2021-39261:
    A crafted NTFS image can cause a heap-based buffer overflow in ntfs_compressed_pwrite in NTFS-3G <     2021.8.22.

    CVE-2021-39262:
    A crafted NTFS image can cause an out-of-bounds access in ntfs_decompress in NTFS-3G < 2021.8.22.

    CVE-2021-39263:
    A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in     ntfs_get_attribute_value, in NTFS-3G < 2021.8.22.

    CVE-2021-3975:
    A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in     qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a     monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the guest is     shutting down. An unprivileged client with a read-only connection could use this flaw to perform a denial     of service attack by causing the libvirt daemon to crash.

    CVE-2021-4145:
    A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0.
    The `self` pointer is dereferenced in mirror_wait_on_conflicts() without ensuring that it's not NULL. A     malicious unprivileged user within the guest could use this flaw to crash the QEMU process on the host     when writing data reaches the threshold of mirroring node.

    CVE-2021-4158:
    A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within     the guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service     condition.

    CVE-2022-0485:
    A flaw was found in the copying tool `nbdcopy` of libnbd. When performing multi-threaded copies using     asynchronous nbd calls, nbdcopy was blindly treating the completion of an asynchronous command as     successful, rather than checking the *error parameter. This could result in the silent creation of a     corrupted destination image.

    CVE-2022-26354:
    A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached     from the virtqueue before freeing its memory, leading to memory leakage and other unexpected results.
    Affected QEMU versions <= 6.2.0.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption     boundary. A MitM attacker could use this flaw to inject a plaintext NBD_OPT_STRUCTURED_REPLY before     proxying everything else a client sends to the server, potentially leading the client to terminate the NBD     session. The highest threat from this vulnerability is to system availability. (CVE-2021-3716)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of AHV installed on the remote host is prior to AHV-10.0. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.0 advisory.

  - A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in     ntfs_get_attribute_value, in NTFS-3G < 2021.8.22. (CVE-2021-39263)

  - An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer     overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX). (CVE-2024-45492)

  - Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.14.0 and     1.15.10, a malicious or compromised Flatpak app using persistent directories could access and write files     outside of what it would otherwise have access to, which is an attack on integrity and confidentiality.
    When `persistent=subdir` is used in the application permissions (represented as `--persist=subdir` in the     command-line interface), that means that an application which otherwise doesn't have access to the real     user home directory will see an empty home directory with a writeable subdirectory `subdir`. Behind the     scenes, this directory is actually a bind mount and the data is stored in the per-application directory as     `~/.var/app/$APPID/subdir`. This allows existing apps that are not aware of the per-application directory     to still work as intended without general home directory access. However, the application does have write     access to the application directory `~/.var/app/$APPID` where this directory is stored. If the source     directory for the `persistent`/`--persist` option is replaced by a symlink, then the next time the     application is started, the bind mount will follow the symlink and mount whatever it points to into the     sandbox. Partial protection against this vulnerability can be provided by patching Flatpak using the     patches in commits ceec2ffc and 98f79773. However, this leaves a race condition that could be exploited by     two instances of a malicious app running in parallel. Closing the race condition requires updating or     patching the version of bubblewrap that is used by Flatpak to add the new `--bind-fd` option using the     patch and then patching Flatpak to use it. If Flatpak has been configured at build-time with     `-Dsystem_bubblewrap=bwrap` (1.15.x) or `--with-system-bubblewrap=bwrap` (1.14.x or older), or a similar     option, then the version of bubblewrap that needs to be patched is a system copy that is distributed     separately, typically `/usr/bin/bwrap`. This configuration is the one that is typically used in Linux     distributions. If Flatpak has been configured at build-time with `-Dsystem_bubblewrap=` (1.15.x) or with     `--without-system-bubblewrap` (1.14.x or older), then it is the bundled version of bubblewrap that is     included with Flatpak that must be patched. This is typically installed as `/usr/libexec/flatpak-bwrap`.
    This configuration is the default when building from source code. For the 1.14.x stable branch, these     changes are included in Flatpak 1.14.10. The bundled version of bubblewrap included in this release has     been updated to 0.6.3. For the 1.15.x development branch, these changes are included in Flatpak 1.15.10.
    The bundled version of bubblewrap in this release is a Meson wrap subproject, which has been updated to     0.10.0. The 1.12.x and 1.10.x branches will not be updated for this vulnerability. Long-term support OS     distributions should backport the individual changes into their versions of Flatpak and bubblewrap, or     update to newer versions if their stability policy allows it. As a workaround, avoid using applications     using the `persistent` (`--persist`) permission. (CVE-2024-42472)

  - Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote     attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the     KeyTrap issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the     protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG     records. (CVE-2023-50387)

  - The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped)     allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC     responses in a random subdomain attack, aka the NSEC3 issue. The RFC 5155 specification implies that an     algorithm must perform thousands of iterations of a hash function in certain situations. (CVE-2023-50868)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0276 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

      CVE-2021-3716:
      A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption     boundary. A MitM attacker could use this flaw to inject a plaintext NBD_OPT_STRUCTURED_REPLY before     proxying everything else a client sends to the server, potentially leading the client to terminate the NBD     session. The highest threat from this vulnerability is to system availability.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1759 advisory.

    Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware     platforms. The virt:rhel module contains packages which provide user-space components used to run virtual     machines using KVM. The packages also provide APIs for managing and interacting with the virtualized     systems.

    The following packages have been upgraded to a later upstream version: qemu-kvm (6.2.0), libvirt (8.0.0),     libvirt-python (8.0.0), perl-Sys-Virt (8.0.0), seabios (1.15.0), libtpms (0.9.1). (BZ#1997410, BZ#2012802,     BZ#2012806, BZ#2012813, BZ#2018392, BZ#2027716, BZ#2029355)

    Security Fix(es):

    * QEMU: virtio-net: heap use-after-free in virtio_net_receive_rcu (CVE-2021-3748)

    * ntfs-3g: Out-of-bounds heap buffer access in ntfs_get_attribute_value() due to incorrect check of     bytes_in_use value in MFT records (CVE-2021-33285)

    * ntfs-3g: Heap buffer overflow triggered by a specially crafted Unicode string (CVE-2021-33286)

    * ntfs-3g: Heap buffer overflow in ntfs_attr_pread_i() triggered by specially crafted NTFS attributes     (CVE-2021-33287)

    * ntfs-3g: Heap buffer overflow triggered by a specially crafted MFT section (CVE-2021-33289)

    * ntfs-3g: Heap buffer overflow triggered by a specially crafted NTFS inode pathname (CVE-2021-35266)

    * ntfs-3g: Stack buffer overflow triggered when correcting differences between MFT and MFTMirror sections     (CVE-2021-35267)

    * ntfs-3g: Heap buffer overflow in ntfs_inode_real_open() triggered by a specially crafted NTFS inode     (CVE-2021-35268)

    * ntfs-3g: Heap buffer overflow in ntfs_attr_setup_flag() triggered by a specially crafted NTFS attribute     from MFT (CVE-2021-35269)

    * ntfs-3g: NULL pointer dereference in ntfs_extent_inode_open() (CVE-2021-39251)

    * ntfs-3g: Out-of-bounds read in ntfs_ie_lookup() (CVE-2021-39252)

    * ntfs-3g: Out-of-bounds read in ntfs_runlists_merge_i() (CVE-2021-39253)

    * ntfs-3g: Integer overflow in memmove() leading to heap buffer overflow in ntfs_attr_record_resize()     (CVE-2021-39254)

    * ntfs-3g: Out-of-bounds read ntfs_attr_find_in_attrdef() triggered by an invalid attribute     (CVE-2021-39255)

    * ntfs-3g: Heap buffer overflow in ntfs_inode_lookup_by_name() (CVE-2021-39256)

    * ntfs-3g: Endless recursion from ntfs_attr_pwrite() triggered by an unallocated bitmap (CVE-2021-39257)

    * ntfs-3g: Out-of-bounds reads in ntfs_attr_find() and ntfs_external_attr_find() (CVE-2021-39258)

    * ntfs-3g: Out-of-bounds access in ntfs_inode_lookup_by_name() caused by an unsanitized attribute length     (CVE-2021-39259)

    * ntfs-3g: Out-of-bounds access in ntfs_inode_sync_standard_information() (CVE-2021-39260)

    * ntfs-3g: Heap buffer overflow in ntfs_compressed_pwrite() (CVE-2021-39261)

    * ntfs-3g: Out-of-bounds access in ntfs_decompress() (CVE-2021-39262)

    * ntfs-3g: Heap buffer overflow in ntfs_get_attribute_value() caused by an unsanitized attribute     (CVE-2021-39263)

    * libnbd: nbdcopy: missing error handling may create corrupted destination image (CVE-2022-0485)

    * hivex: stack overflow due to recursive call of _get_children() (CVE-2021-3622)

    * nbdkit: NBD_OPT_STRUCTURED_REPLY injection on STARTTLS (CVE-2021-3716)

    * libvirt: segmentation fault during VM shutdown can lead to vdsm hang (CVE-2021-3975)

    * QEMU: NULL pointer dereference in mirror_wait_on_conflicts() in block/mirror.c (CVE-2021-4145)

    * QEMU: NULL pointer dereference in pci_write() in hw/acpi/pcihp.c (CVE-2021-4158)

    * QEMU: block: fdc: null pointer dereference may lead to guest crash (CVE-2021-20196)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.6 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3705:01 advisory.

    * QEMU: virtio-net: heap use-after-free in virtio_net_receive_rcu     (CVE-2021-3748)
      * ntfs-3g: Out-of-bounds heap buffer access in ntfs_get_attribute_value() due     to incorrect check of bytes_in_use value in MFT records (CVE-2021-33285)
      * ntfs-3g: Heap buffer overflow triggered by a specially crafted Unicode     string (CVE-2021-33286)
      * ntfs-3g: Heap buffer overflow in ntfs_attr_pread_i() triggered by specially     crafted NTFS attributes (CVE-2021-33287)
      * ntfs-3g: Heap buffer overflow triggered by a specially crafted MFT section     (CVE-2021-33289)
      * ntfs-3g: Heap buffer overflow triggered by a specially crafted NTFS inode     pathname (CVE-2021-35266)
      * ntfs-3g: Stack buffer overflow triggered when correcting differences between     MFT and MFTMirror sections (CVE-2021-35267)
      * ntfs-3g: Heap buffer overflow in ntfs_inode_real_open() triggered by a     specially crafted NTFS inode (CVE-2021-35268)
      * ntfs-3g: Heap buffer overflow in ntfs_attr_setup_flag() triggered by a     specially crafted NTFS attribute from MFT (CVE-2021-35269)
      * ntfs-3g: NULL pointer dereference in ntfs_extent_inode_open()     (CVE-2021-39251)
      * ntfs-3g: Out-of-bounds read in ntfs_ie_lookup() (CVE-2021-39252)
      * ntfs-3g: Out-of-bounds read in ntfs_runlists_merge_i() (CVE-2021-39253)
      * ntfs-3g: Integer overflow in memmove() leading to heap buffer overflow in     ntfs_attr_record_resize() (CVE-2021-39254)
      * ntfs-3g: Out-of-bounds read ntfs_attr_find_in_attrdef() triggered by an     invalid attribute (CVE-2021-39255)
      * ntfs-3g: Heap buffer overflow in ntfs_inode_lookup_by_name()     (CVE-2021-39256)
      * ntfs-3g: Endless recursion from ntfs_attr_pwrite() triggered by an     unallocated bitmap (CVE-2021-39257)
      * ntfs-3g: Out-of-bounds reads in ntfs_attr_find() and     ntfs_external_attr_find() (CVE-2021-39258)
      * ntfs-3g: Out-of-bounds access in ntfs_inode_lookup_by_name() caused by an     unsanitized attribute length (CVE-2021-39259)
      * ntfs-3g: Out-of-bounds access in ntfs_inode_sync_standard_information()     (CVE-2021-39260)
      * ntfs-3g: Heap buffer overflow in ntfs_compressed_pwrite() (CVE-2021-39261)
      * ntfs-3g: Out-of-bounds access in ntfs_decompress() (CVE-2021-39262)
      * ntfs-3g: Heap buffer overflow in ntfs_get_attribute_value() caused by an     unsanitized attribute (CVE-2021-39263)
      * libnbd: nbdcopy: missing error handling may create corrupted destination     image (CVE-2022-0485)
      * hivex: stack overflow due to recursive call of _get_children()     (CVE-2021-3622)
      * nbdkit: NBD_OPT_STRUCTURED_REPLY injection on STARTTLS (CVE-2021-3716)
      * libvirt: segmentation fault during VM shutdown can lead to vdsm hang     (CVE-2021-3975)
      * QEMU: NULL pointer dereference in mirror_wait_on_conflicts() in     block/mirror.c (CVE-2021-4145)
      * QEMU: NULL pointer dereference in pci_write() in hw/acpi/pcihp.c     (CVE-2021-4158)
      * QEMU: block: fdc: null pointer dereference may lead to guest crash     (CVE-2021-20196)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3568:01 advisory.

    * QEMU: virtio-net: heap use-after-free in virtio_net_receive_rcu     (CVE-2021-3748)
      * ntfs-3g: Out-of-bounds heap buffer access in ntfs_get_attribute_value() due     to incorrect check of bytes_in_use value in MFT records (CVE-2021-33285)
      * ntfs-3g: Heap buffer overflow triggered by a specially crafted Unicode     string (CVE-2021-33286)
      * ntfs-3g: Heap buffer overflow in ntfs_attr_pread_i() triggered by specially     crafted NTFS attributes (CVE-2021-33287)
      * ntfs-3g: Heap buffer overflow triggered by a specially crafted MFT section     (CVE-2021-33289)
      * ntfs-3g: Heap buffer overflow triggered by a specially crafted NTFS inode     pathname (CVE-2021-35266)
      * ntfs-3g: Stack buffer overflow triggered when correcting differences between     MFT and MFTMirror sections (CVE-2021-35267)
      * ntfs-3g: Heap buffer overflow in ntfs_inode_real_open() triggered by a     specially crafted NTFS inode (CVE-2021-35268)
      * ntfs-3g: Heap buffer overflow in ntfs_attr_setup_flag() triggered by a     specially crafted NTFS attribute from MFT (CVE-2021-35269)
      * ntfs-3g: NULL pointer dereference in ntfs_extent_inode_open()     (CVE-2021-39251)
      * ntfs-3g: Out-of-bounds read in ntfs_ie_lookup() (CVE-2021-39252)
      * ntfs-3g: Out-of-bounds read in ntfs_runlists_merge_i() (CVE-2021-39253)
      * ntfs-3g: Integer overflow in memmove() leading to heap buffer overflow in     ntfs_attr_record_resize() (CVE-2021-39254)
      * ntfs-3g: Out-of-bounds read ntfs_attr_find_in_attrdef() triggered by an     invalid attribute (CVE-2021-39255)
      * ntfs-3g: Heap buffer overflow in ntfs_inode_lookup_by_name()     (CVE-2021-39256)
      * ntfs-3g: Endless recursion from ntfs_attr_pwrite() triggered by an     unallocated bitmap (CVE-2021-39257)
      * ntfs-3g: Out-of-bounds reads in ntfs_attr_find() and     ntfs_external_attr_find() (CVE-2021-39258)
      * ntfs-3g: Out-of-bounds access in ntfs_inode_lookup_by_name() caused by an     unsanitized attribute length (CVE-2021-39259)
      * ntfs-3g: Out-of-bounds access in ntfs_inode_sync_standard_information()     (CVE-2021-39260)
      * ntfs-3g: Heap buffer overflow in ntfs_compressed_pwrite() (CVE-2021-39261)
      * ntfs-3g: Out-of-bounds access in ntfs_decompress() (CVE-2021-39262)
      * ntfs-3g: Heap buffer overflow in ntfs_get_attribute_value() caused by an     unsanitized attribute (CVE-2021-39263)
      * libnbd: nbdcopy: missing error handling may create corrupted destination     image (CVE-2022-0485)
      * hivex: stack overflow due to recursive call of _get_children()     (CVE-2021-3622)
      * nbdkit: NBD_OPT_STRUCTURED_REPLY injection on STARTTLS (CVE-2021-3716)
      * libvirt: segmentation fault during VM shutdown can lead to vdsm hang     (CVE-2021-3975)
      * QEMU: NULL pointer dereference in mirror_wait_on_conflicts() in     block/mirror.c (CVE-2021-4145)
      * QEMU: NULL pointer dereference in pci_write() in hw/acpi/pcihp.c     (CVE-2021-4158)
      * QEMU: block: fdc: null pointer dereference may lead to guest crash     (CVE-2021-20196)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1759 advisory.

    - Limit recursion in ri-records (CVE-2021-3622)       resolves: rhbz#1976194
    - Fixes: CVE-2021-33285, CVE-2021-33286, CVE-2021-33287, CVE-2021-33289,       CVE-2021-35266, CVE-2021-35267, CVE-2021-35268, CVE-2021-35269,       CVE-2021-39251, CVE-2021-39252, CVE-2021-39253, CVE-2021-39254       resolves: rhbz#2004490

    libnbd
    - Fix CVE-2022-0485: Fail nbdcopy if NBD read or write fails       resolves: rhbz#2045718
    - Resolves: bz#2046198       (CVE-2022-0358 virt:av/qemu-kvm: QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405     [rhel-8.6])
    - Resolves: bz#2036580       (CVE-2021-4158 virt:rhel/qemu-kvm: QEMU: NULL pointer dereference in pci_write() in hw/acpi/pcihp.c     [rhel-8])

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to 20230302.102005. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.100173 advisory.

  - A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in     ntfs_get_attribute_value, in NTFS-3G < 2021.8.22. (CVE-2021-39263)

  - EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers     option from a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain     unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.
    (CVE-2023-45234)

  - A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may     allow an authenticated client to cause a denial of service. (CVE-2023-1667)

  - A vulnerability was found in libssh, where the authentication check of the connecting client can be     bypassed in the`pki_verify_data_signature` function in memory allocation problems. This issue may happen     if there is insufficient memory or the memory usage is limited. The problem is caused by the return value     `rc,` which is initialized to SSH_ERROR and later rewritten to save the return value of the function call     `pki_key_check_hash_compatible.` The value of the variable is not changed between this point and the     cryptographic verification. Therefore any error between them calls `goto error` returning SSH_OK.
    (CVE-2023-2283)

  - A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange     differ from response times of ciphertexts with correct PKCS#1 v1.5 padding. (CVE-2023-5981)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to 20230302.102005. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.101026 advisory.

  - A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in     ntfs_get_attribute_value, in NTFS-3G < 2021.8.22. (CVE-2021-39263)

  - EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers     option from a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain     unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.
    (CVE-2023-45234)

  - Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote     attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the     KeyTrap issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the     protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG     records. (CVE-2023-50387)

  - The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped)     allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC     responses in a random subdomain attack, aka the NSEC3 issue. The RFC 5155 specification implies that an     algorithm must perform thousands of iterations of a hash function in certain situations. (CVE-2023-50868)

  - close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. (CVE-2022-48624)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:1759 advisory.

  - A NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs while     processing read/write ioport commands if the selected floppy drive is not initialized with a block device.
    This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of     service. The highest threat from this vulnerability is to system availability. (CVE-2021-20196)

  - In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute is supplied to the function     ntfs_get_attribute_value, a heap buffer overflow can occur allowing for memory disclosure or denial of     service. The vulnerability is caused by an out-of-bound buffer access which can be triggered by mounting a     crafted ntfs partition. The root cause is a missing consistency check after reading an MFT record : the     bytes_in_use field should be less than the bytes_allocated field. When it is not, the parsing of the     records proceeds into the wild. (CVE-2021-33285)

  - In NTFS-3G versions < 2021.8.22, when a specially crafted unicode string is supplied in an NTFS image a     heap buffer overflow can occur and allow for code execution. (CVE-2021-33286)

  - In NTFS-3G versions < 2021.8.22, when specially crafted NTFS attributes are read in the function     ntfs_attr_pread_i, a heap buffer overflow can occur and allow for writing to arbitrary memory or denial of     service of the application. (CVE-2021-33287)

  - In NTFS-3G versions < 2021.8.22, when a specially crafted MFT section is supplied in an NTFS image a heap     buffer overflow can occur and allow for code execution. (CVE-2021-33289)

  - In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode pathname is supplied in an NTFS image     a heap buffer overflow can occur resulting in memory disclosure, denial of service and even code     execution. (CVE-2021-35266)

  - NTFS-3G versions < 2021.8.22, a stack buffer overflow can occur when correcting differences in the MFT and     MFTMirror allowing for code execution or escalation of privileges when setuid-root. (CVE-2021-35267)

  - In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode is loaded in the function     ntfs_inode_real_open, a heap buffer overflow can occur allowing for code execution and escalation of     privileges. (CVE-2021-35268)

  - NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute from the MFT is setup in the     function ntfs_attr_setup_flag, a heap buffer overflow can occur allowing for code execution and escalation     of privileges. (CVE-2021-35269)

  - A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows     Registry (hive) file, which would cause hivex to recursively call the _get_children() function, leading to     a stack overflow. The highest threat from this vulnerability is to system availability. (CVE-2021-3622)

  - A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption     boundary. A MitM attacker could use this flaw to inject a plaintext NBD_OPT_STRUCTURED_REPLY before     proxying everything else a client sends to the server, potentially leading the client to terminate the NBD     session. The highest threat from this vulnerability is to system availability. (CVE-2021-3716)

  - A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the     descriptor's address belongs to the non direct access region, due to num_buffers being set after the     virtqueue elem has been unmapped. A malicious guest could use this flaw to crash QEMU, resulting in a     denial of service condition, or potentially execute code on the host with the privileges of the QEMU     process. (CVE-2021-3748)

  - A crafted NTFS image can cause a NULL pointer dereference in ntfs_extent_inode_open in NTFS-3G <     2021.8.22. (CVE-2021-39251)

  - A crafted NTFS image can cause an out-of-bounds read in ntfs_ie_lookup in NTFS-3G < 2021.8.22.
    (CVE-2021-39252)

  - A crafted NTFS image can cause an out-of-bounds read in ntfs_runlists_merge_i in NTFS-3G < 2021.8.22.
    (CVE-2021-39253)

  - A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in     the function ntfs_attr_record_resize, in NTFS-3G < 2021.8.22. (CVE-2021-39254)

  - A crafted NTFS image can trigger an out-of-bounds read, caused by an invalid attribute in     ntfs_attr_find_in_attrdef, in NTFS-3G < 2021.8.22. (CVE-2021-39255)

  - A crafted NTFS image can cause a heap-based buffer overflow in ntfs_inode_lookup_by_name in NTFS-3G <     2021.8.22. (CVE-2021-39256)

  - A crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call chain     (starting from ntfs_attr_pwrite), causing stack consumption in NTFS-3G < 2021.8.22. (CVE-2021-39257)

  - A crafted NTFS image can cause out-of-bounds reads in ntfs_attr_find and ntfs_external_attr_find in     NTFS-3G < 2021.8.22. (CVE-2021-39258)

  - A crafted NTFS image can trigger an out-of-bounds access, caused by an unsanitized attribute length in     ntfs_inode_lookup_by_name, in NTFS-3G < 2021.8.22. (CVE-2021-39259)

  - A crafted NTFS image can cause an out-of-bounds access in ntfs_inode_sync_standard_information in NTFS-3G     < 2021.8.22. (CVE-2021-39260)

  - A crafted NTFS image can cause a heap-based buffer overflow in ntfs_compressed_pwrite in NTFS-3G <     2021.8.22. (CVE-2021-39261)

  - A crafted NTFS image can cause an out-of-bounds access in ntfs_decompress in NTFS-3G < 2021.8.22.
    (CVE-2021-39262)

  - A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in     ntfs_get_attribute_value, in NTFS-3G < 2021.8.22. (CVE-2021-39263)

  - A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in     qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a     monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the guest is     shutting down. An unprivileged client with a read-only connection could use this flaw to perform a denial     of service attack by causing the libvirt daemon to crash. (CVE-2021-3975)

  - A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0.
    The `self` pointer is dereferenced in mirror_wait_on_conflicts() without ensuring that it's not NULL. A     malicious unprivileged user within the guest could use this flaw to crash the QEMU process on the host     when writing data reaches the threshold of mirroring node. (CVE-2021-4145)

  - A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within     the guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service     condition. (CVE-2021-4158)

  - A flaw was found in the copying tool `nbdcopy` of libnbd. When performing multi-threaded copies using     asynchronous nbd calls, nbdcopy was blindly treating the completion of an asynchronous command as     successful, rather than checking the *error parameter. This could result in the silent creation of a     corrupted destination image. (CVE-2022-0485)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1759 advisory.

  - QEMU: block: fdc: null pointer dereference may lead to guest crash (CVE-2021-20196)

  - ntfs-3g: Out-of-bounds heap buffer access in ntfs_get_attribute_value() due to incorrect check of     bytes_in_use value in MFT records (CVE-2021-33285)

  - ntfs-3g: Heap buffer overflow triggered by a specially crafted Unicode string (CVE-2021-33286)

  - ntfs-3g: Heap buffer overflow in ntfs_attr_pread_i() triggered by specially crafted NTFS attributes     (CVE-2021-33287)

  - ntfs-3g: Heap buffer overflow triggered by a specially crafted MFT section (CVE-2021-33289)

  - ntfs-3g: Heap buffer overflow triggered by a specially crafted NTFS inode pathname (CVE-2021-35266)

  - ntfs-3g: Stack buffer overflow triggered when correcting differences between MFT and MFTMirror sections     (CVE-2021-35267)

  - ntfs-3g: Heap buffer overflow in ntfs_inode_real_open() triggered by a specially crafted NTFS inode     (CVE-2021-35268)

  - ntfs-3g: Heap buffer overflow in ntfs_attr_setup_flag() triggered by a specially crafted NTFS attribute     from MFT (CVE-2021-35269)

  - hivex: stack overflow due to recursive call of _get_children() (CVE-2021-3622)

  - nbdkit: NBD_OPT_STRUCTURED_REPLY injection on STARTTLS (CVE-2021-3716)

  - QEMU: virtio-net: heap use-after-free in virtio_net_receive_rcu (CVE-2021-3748)

  - ntfs-3g: NULL pointer dereference in ntfs_extent_inode_open() (CVE-2021-39251)

  - ntfs-3g: Out-of-bounds read in ntfs_ie_lookup() (CVE-2021-39252)

  - ntfs-3g: Out-of-bounds read in ntfs_runlists_merge_i() (CVE-2021-39253)

  - ntfs-3g: Integer overflow in memmove() leading to heap buffer overflow in ntfs_attr_record_resize()     (CVE-2021-39254)

  - ntfs-3g: Out-of-bounds read ntfs_attr_find_in_attrdef() triggered by an invalid attribute (CVE-2021-39255)

  - ntfs-3g: Heap buffer overflow in ntfs_inode_lookup_by_name() (CVE-2021-39256)

  - ntfs-3g: Endless recursion from ntfs_attr_pwrite() triggered by an unallocated bitmap (CVE-2021-39257)

  - ntfs-3g: Out-of-bounds reads in ntfs_attr_find() and ntfs_external_attr_find() (CVE-2021-39258)

  - ntfs-3g: Out-of-bounds access in ntfs_inode_lookup_by_name() caused by an unsanitized attribute length     (CVE-2021-39259)

  - ntfs-3g: Out-of-bounds access in ntfs_inode_sync_standard_information() (CVE-2021-39260)

  - ntfs-3g: Heap buffer overflow in ntfs_compressed_pwrite() (CVE-2021-39261)

  - ntfs-3g: Out-of-bounds access in ntfs_decompress() (CVE-2021-39262)

  - ntfs-3g: Heap buffer overflow in ntfs_get_attribute_value() caused by an unsanitized attribute     (CVE-2021-39263)

  - libvirt: segmentation fault during VM shutdown can lead to vdsm hang (CVE-2021-3975)

  - QEMU: NULL pointer dereference in mirror_wait_on_conflicts() in block/mirror.c (CVE-2021-4145)

  - QEMU: NULL pointer dereference in pci_write() in hw/acpi/pcihp.c (CVE-2021-4158)

  - libnbd: nbdcopy: missing error handling may create corrupted destination image (CVE-2022-0485)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
157331	RHEL 8 : virt:av and virt-devel:av (RHSA-2022:0397)	Nessus	Red Hat Local Security Checks	2/2/2022	4/14/2025	medium
161144	AlmaLinux 8 : virt:rhel and virt-devel:rhel (ALSA-2022:1759)	Nessus	Alma Linux Local Security Checks	5/12/2022	1/13/2025	high
236413	Alibaba Cloud Linux 3 : 0168: virt:rhel and virt-devel:rhel (ALINUX3-SA-2022:0168)	Nessus	Alibaba Cloud Linux Local Security Checks	5/14/2025	5/14/2025	high
224044	Linux Distros Unpatched Vulnerability : CVE-2021-3716	Nessus	Misc.	3/5/2025	4/28/2026	low
310786	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.0)	Nessus	Misc.	4/29/2026	4/30/2026	medium
238834	TencentOS Server 3: nbdkit (TSSA-2022:0276)	Nessus	Tencent Local Security Checks	6/16/2025	12/5/2025	low
161052	RHEL 8 : virt:rhel and virt-devel:rhel (RHSA-2022:1759)	Nessus	Red Hat Local Security Checks	5/11/2022	3/15/2025	high
293675	MiracleLinux 8 : virt:rhel and virt-devel:rhel (AXSA:2022-3705:01)	Nessus	Miracle Linux Local Security Checks	1/20/2026	2/4/2026	high
293950	MiracleLinux 8 : virt:rhel (AXSA:2022-3568:01)	Nessus	Miracle Linux Local Security Checks	1/20/2026	2/4/2026	high
161302	Oracle Linux 8 : virt:ol / and / virt-devel:ol (ELSA-2022-1759)	Nessus	Oracle Linux Local Security Checks	5/18/2022	11/1/2024	high
206823	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.100173)	Nessus	Misc.	9/9/2024	2/17/2025	low
206824	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.101026)	Nessus	Misc.	9/9/2024	10/6/2025	medium
184718	Rocky Linux 8 : virt:rhel and virt-devel:rhel (RLSA-2022:1759)	Nessus	Rocky Linux Local Security Checks	11/6/2023	11/7/2023	high
160913	CentOS 8 : virt:rhel and virt-devel:rhel (CESA-2022:1759)	Nessus	CentOS Local Security Checks	5/10/2022	4/17/2023	high

Detections

Analytics

Plugins Search

medium

high

high

low

medium

low

high

high

high

high

low

medium

high

high