リモートホストは、GLSA-201701-49（QEMU：複数の脆弱性）で説明されている脆弱性に影響されています。複数の脆弱性がQEMUで発見されています。詳細については、以下に記載されているCVE識別番号を参照してください。影響：ゲストQEMU環境内特権ユーザー/プロセスが、QEMUゲストプロセスまたはホストに対してサービス拒否状態を引き起こす可能性があります。回避策：現時点では、既知の回避策はありません。

遠端主機受到 GLSA-201701-49 中所述的弱點影響 (QEMU：多個弱點) 在 QEMU 中發現多個弱點。如需詳細資訊，請檢閱以下提及的 CVE 識別碼。影響：客體 QEMU 環境內的有權限使用者/處理程序可對 QEMU 客體處理程序或主機造成拒絕服務情形。因應措施：目前尚無已知的因應措施。

远程主机受到 GLSA-201701-49 中所述漏洞的影响（QEMU：多个漏洞）

    已在 QEMU 中发现多个漏洞。请检查下方引用的 CVE 标识符以了解详细信息。
  影响：

    客户机 QEMU 环境内有权限的用户/进程可对 QEMU 客户机进程或主机造成拒绝服务情形。
  变通方案：

    目前无任何已知的变通方案。

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - QEMU: net: ignore packets with large size (CVE-2018-17963)

  - Buffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0     allows guest users to cause a denial of service (QEMU process crash) via a crafted virtio control message.
    (CVE-2015-5745)

  - The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a     denial of service (infinite loop and CPU consumption) via a circular isochronous transfer descriptor (iTD)     list. (CVE-2015-8558)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - QEMU: net: ignore packets with large size (CVE-2018-17963)

  - Buffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0     allows guest users to cause a denial of service (QEMU process crash) via a crafted virtio control message.
    (CVE-2015-5745)

  - The MSI-X MMIO support in hw/pci/msix.c in QEMU (aka Quick Emulator) allows local guest OS privileged     users to cause a denial of service (NULL pointer dereference and QEMU process crash) by leveraging failure     to define the .write method. (CVE-2015-7549)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote host is affected by the vulnerability described in GLSA-201701-49 (QEMU: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in QEMU. Please review the       CVE identifiers referenced below for details.
  Impact :

    A privileged user/process within a guest QEMU environment can cause a       Denial of Service condition against the QEMU guest process or the host.
  Workaround :

    There is no known workaround at this time.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
96684	GLSA-201701-49：QEMU：複数の脆弱性	Nessus	Gentoo Local Security Checks	2017/1/23	2021/1/11	medium
96684	GLSA-201701-49：QEMU：多個弱點	Nessus	Gentoo Local Security Checks	2017/1/23	2021/1/11	medium
96684	GLSA-201701-49：QEMU：多个漏洞	Nessus	Gentoo Local Security Checks	2017/1/23	2021/1/11	medium
198718	RHEL 6 : qemu-kvm (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	critical
198727	RHEL 7 : qemu-kvm (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	critical
96684	GLSA-201701-49 : QEMU: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2017/1/23	2021/1/11	medium

検出

プラグインの検索

medium

medium

medium

critical

critical

medium