The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9285 advisory.

    - imx7-ccm: add digprog mmio write method (Prasad J Pandit)  [Orabug: 31576552]  {CVE-2020-15469}
    - tz-ppc: add dummy read/write methods (Prasad J Pandit)  [Orabug: 31576552]  {CVE-2020-15469}
    - spapr_pci: add spapr msi read method (Prasad J Pandit)  [Orabug: 31576552]  {CVE-2020-15469}
    - nvram: add nrf51_soc flash read method (Prasad J Pandit)  [Orabug: 31576552]  {CVE-2020-15469}
    - prep: add ppc-parity write method (Prasad J Pandit)  [Orabug: 31576552]  {CVE-2020-15469}
    - vfio: add quirk device write method (Prasad J Pandit)  [Orabug: 31576552]  {CVE-2020-15469}
    - pci-host: designware: add pcie-msi read method (Prasad J Pandit)  [Orabug: 31576552]  {CVE-2020-15469}
    - hw/pci-host: add pci-intack write method (Prasad J Pandit)  [Orabug: 31576552]  {CVE-2020-15469}
    - hw/intc/arm_gic: Fix interrupt ID in GICD_SGIR register (Philippe Mathieu-Daude)  [Orabug: 32470471]     {CVE-2021-20221}
    - memory: clamp cached translation in case it points to an MMIO region (Paolo Bonzini)  [Orabug: 32252673]     {CVE-2020-27821}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8412-1 advisory.

    Felipe Franciosi, Raphael Norwitz, and Peter Turschmid discovered that the iSCSI block driver in QEMU     incorrectly handled certain responses from an iSCSI server. A remote attacker could possibly use this     issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code. This     issue only affected Ubuntu 14.04 LTS. (CVE-2020-1711)

    It was discovered that the iSCSI block driver in QEMU incorrectly handled certain memory operations,     leading to a heap-based buffer over-read. An attacker could possibly use this issue to expose sensitive     information from the host. This issue only affected Ubuntu 14.04 LTS. (CVE-2020-11947)

    Ziming Zhang discovered that the SM501 display driver in QEMU contained an integer overflow. A local     attacker could possibly use this issue to cause QEMU to crash, resulting in a denial of service. This     issue only affected Ubuntu 14.04 LTS. (CVE-2020-12829)

    Gaoning Pan and Xingwei Li discovered that the USB xHCI controller implementation in QEMU contained an     infinite loop. An attacker inside the guest could possibly use this issue to cause QEMU to hang, resulting     in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS.
    (CVE-2020-14394)

    Lei Sun discovered that QEMU incorrectly handled certain MemoryRegionOps objects, leading to a NULL     pointer dereference. An attacker inside the guest could possibly use this issue to cause QEMU to crash,     resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS.
    (CVE-2020-15469)

    Alexander Bulekov discovered that the e1000e network device implementation in QEMU contained a use-after-     free. An attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting in a     denial of service. This issue only affected Ubuntu 14.04 LTS. (CVE-2020-15859)

    Ziming Zhang discovered that the XGMAC Ethernet controller in QEMU contained a buffer overflow. An     attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting in a denial of     service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS. (CVE-2020-15863)

    Alexander Bulekov discovered that the SDHCI device emulation in QEMU contained a heap-based buffer     overflow. An attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting in     a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS.
    (CVE-2020-17380)

    Sergej Schumilo, Cornelius Aschermann, and Simon Wrner discovered that the USB xHCI controller     implementation in QEMU did not check a return value, leading to a use-after-free. An attacker inside the     guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service. This issue     only affected Ubuntu 14.04 LTS. (CVE-2020-25084)

    Gaoning Pan, Yongkang Jia, and Yi Ren discovered that the USB OHCI controller implementation in QEMU     contained a stack-based buffer over-read. An attacker inside the guest could possibly use this issue to     cause QEMU to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS.
    (CVE-2020-25624)

    It was discovered that the USB OHCI controller implementation in QEMU contained an infinite loop. An     attacker inside the guest could possibly use this issue to cause QEMU to consume resources, resulting in a     denial of service. This issue only affected Ubuntu 14.04 LTS. (CVE-2020-25625)

    Cheolwoo Myung discovered that the USB EHCI emulation in QEMU did not handle DMA memory map failures,     leading to a reachable assertion. An attacker inside the guest could possibly use this issue to cause QEMU     to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS. (CVE-2020-25723)

    Gaoning Pan discovered that the network device emulation in QEMU could be made to trigger an assertion     failure when processing packets that lacked a valid layer 3 protocol. An attacker inside the guest could     possibly use this issue to cause QEMU to crash, resulting in a denial of service. This issue only affected     Ubuntu 14.04 LTS. (CVE-2020-27617)

    Wenxiang Qian discovered that the ATAPI emulation in QEMU did not properly validate a buffer index,     leading to an out-of-bounds read. An attacker inside the guest could possibly use this issue to expose     sensitive information or cause QEMU to crash, resulting in a denial of service. This issue only affected     Ubuntu 14.04 LTS. (CVE-2020-29443)

    Cheolwoo Myung discovered that the ESP SCSI emulation in QEMU contained a NULL pointer dereference. An     attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting in a denial of     service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2020-35504)

    Cheolwoo Myung discovered that the am53c974 SCSI host bus adapter emulation in QEMU contained a NULL     pointer dereference. An attacker inside the guest could possibly use this issue to cause QEMU to crash,     resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS.
    (CVE-2020-35505)

    It was discovered that the SDHCI controller emulation in QEMU contained out-of-bounds read and write     issues. An attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting in a     denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS and     Ubuntu 16.04 LTS. (CVE-2021-3409)

    It was discovered that several network device emulations in QEMU contained an infinite loop when operating     in loopback mode. An attacker inside the guest could possibly use this issue to cause QEMU to crash,     resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS.
    (CVE-2021-3416)

    Alexander Bulekov discovered that the floppy disk emulation in QEMU contained a heap-based buffer     overflow. An attacker inside the guest could possibly use this issue to expose sensitive information or     cause QEMU to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS and     Ubuntu 16.04 LTS. (CVE-2021-3507)

    Remy Noel discovered that the USB redirector device emulation in QEMU performed an unbounded stack     allocation when combining USB packets. An attacker inside the guest could possibly use this issue to cause     QEMU to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu     16.04 LTS. (CVE-2021-3527)

    It was discovered that the QXL display device emulation in QEMU contained an integer overflow, leading to     a heap-based buffer overflow. An attacker inside the guest could possibly use this issue to cause QEMU to     crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected     Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2021-4206)

    It was discovered that the QXL display device emulation in QEMU performed a double fetch of guest-     controlled values, leading to a heap-based buffer overflow. An attacker inside the guest could possibly     use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary     code. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2021-4207)

    It was discovered that the 9pfs server implementation in QEMU contained a race condition, leading to a     use-after-free. A malicious 9p client could possibly use this issue to escalate privileges. This issue     only affected Ubuntu 14.04 LTS. (CVE-2021-20181)

    Gaoning Pan discovered that the floppy disk emulation in QEMU contained a NULL pointer dereference. An     attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting in a denial of     service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2021-20196)

    Gaoning Pan discovered that the vmxnet3 network device emulation in QEMU contained an integer overflow. An     attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting in a denial of     service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2021-20203)

    It was discovered that the ARM Generic Interrupt Controller emulation in QEMU contained an out-of-bounds     heap access. An attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting     in a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2021-20221)

    Alexander Bulekov, Cheolwoo Myung, Sergej Schumilo, Cornelius Aschermann, and Simon Wrner discovered     that the e1000 network device emulation in QEMU contained an infinite loop. An attacker inside the guest     could possibly use this issue to cause QEMU to consume resources, resulting in a denial of service. This     issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2021-20257)

    It was discovered that the 9p passthrough file system implementation in QEMU did not prevent opening     special files on the host. A malicious guest could possibly use this issue to escape the exported 9p tree.
    This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. (CVE-2023-2861)

    It was discovered that the virtio crypto device emulation in QEMU did not properly validate certain buffer     lengths, leading to a heap buffer overflow. An attacker inside the guest could possibly use this issue to     cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only     affected Ubuntu 18.04 LTS. (CVE-2023-3180)

    It was discovered that the built-in VNC server in QEMU contained a NULL pointer dereference when cleaning     up a connection that failed during the handshake. A remote attacker could possibly use this issue to cause     QEMU to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS.
    (CVE-2023-3354)

    It was discovered that QEMU could incorrectly direct a guest I/O operation to disk offset 0 instead of the     intended offset. An attacker inside the guest could possibly use this issue to read or overwrite sensitive     data, potentially gaining control of the host. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04     LTS, and Ubuntu 18.04 LTS. (CVE-2023-5088)

    It was discovered that several virtio device emulations in QEMU did not properly guard against DMA     reentrancy, leading to a double free. An attacker inside the guest could possibly use this issue to cause     QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2024-3446)

    It was discovered that the SDHCI device emulation in QEMU contained a heap- based buffer overflow. An     attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting in a denial of     service. (CVE-2024-3447)

    It was discovered that the QEMU disk image utility (qemu-img) did not properly handle certain crafted     image files. An attacker could possibly use this issue to cause qemu-img to consume excessive resources or     access an unintended external file, resulting in a denial of service. This issue only affected Ubuntu     20.04 LTS. (CVE-2024-4467)

    Cyrille Chatras discovered that the LSI53C895A SCSI Host Bus Adapter emulation in QEMU contained a use-     after-free. An attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting     in a denial of service, or possibly execute arbitrary code. (CVE-2024-6519)

    It was discovered that the NBD server in QEMU contained an improper synchronization issue during socket     closure. A remote attacker could possibly use this issue to cause QEMU to crash, resulting in a denial of     service. (CVE-2024-7409)

    It was discovered that the USB emulation in QEMU contained a reachable assertion. An attacker inside the     guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service.
    (CVE-2024-8354)

    It was discovered that QEMU incorrectly handled resources during the VNC WebSocket handshake, leading to a     use-after-free. A remote attacker could possibly use this issue to cause QEMU to crash, resulting in a     denial of service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2025-11234)

    It was discovered that QEMU could be made to read out of bounds when reading VMDK images. An attacker     could possibly use this issue to expose sensitive information or cause QEMU to crash, resulting in a     denial of service. (CVE-2026-2243)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - ide_atapi_cmd_reply_end in hw/ide/atapi.c in QEMU 5.1.0     allows out-of-bounds read access because a buffer index     is not validated. (CVE-2020-29443)

  - An out-of-bounds read/write access flaw was found in     the USB emulator of the QEMU in versions before 5.2.0.
    This issue occurs while processing USB packets from a     guest when USBDevice 'setup_len' exceeds its     'data_buf[4096]' in the do_token_in, do_token_out     routines. This flaw allows a guest user to crash the     QEMU process, resulting in a denial of service, or the     potential execution of arbitrary code with the     privileges of the QEMU process on the host.
    (CVE-2020-14364)

  - hw/pci/msix.c in QEMU 4.2.0 allows guest OS users to     trigger an out-of-bounds access via a crafted address     in an msi-x mmio operation.(CVE-2020-13754)

  - In QEMU 4.2.0, a MemoryRegionOps object may lack     read/write callback methods, leading to a NULL pointer     dereference.(CVE-2020-15469)

  - A heap-based buffer overflow was found in QEMU through     5.0.0 in the SDHCI device emulation support. It could     occur while doing a multi block SDMA transfer via the     sdhci_sdma_transfer_multi_blocks() routine in     hw/sd/sdhci.c. A guest user or process could use this     flaw to crash the QEMU process on the host, resulting     in a denial of service condition, or potentially     execute arbitrary code with privileges of the QEMU     process on the host.(CVE-2020-17380)

  - QEMU 5.0.0 has a heap-based Buffer Overflow in     flatview_read_continue in exec.c because hw/sd/sdhci.c     mishandles a write operation in the SDHC_BLKSIZE     case.(CVE-2020-25085)

  - The patch for CVE-2020-17380/CVE-2020-25085 was found     to be ineffective, thus making QEMU vulnerable to the     out-of-bounds read/write access issues previously found     in the SDHCI controller emulation code. This flaw     allows a malicious privileged guest to crash the QEMU     process on the host, resulting in a denial of service     or potential code execution. QEMU up to (including)     5.2.0 is affected by this.(CVE-2021-3409)

  - A potential stack overflow via infinite loop issue was     found in various NIC emulators of QEMU in versions up     to and including 5.2.0. The issue occurs in loopback     mode of a NIC wherein reentrant DMA checks get     bypassed. A guest user/process may use this flaw to     consume CPU cycles or crash the QEMU process on the     host resulting in DoS scenario.(CVE-2021-3416)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer     dereference. (CVE-2020-15469)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES11 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:14772-1 advisory.

    - CVE-2021-3594: invalid pointer initialization may lead to information disclosure in slirp (udp)     (bsc#1187367)
    - CVE-2021-3592: invalid pointer initialization may lead to information disclosure (bootp). (bsc#1187364)
    - CVE-2021-3416: infinite loop in loopback mode may lead to stack overflow. (bsc#1186473)
    - CVE-2020-15469: MMIO ops null pointer dereference may lead to DoS. (bsc#1173612)
    - CVE-2020-11947: iscsi_aio_ioctl_cb in block/iscsi.c has a heap-based buffer over-read. (bsc#1180523)
    - CVE-2021-20221: out-of-bound heap buffer access via an interrupt ID field. (bsc#1181933)
    - CVE-2020-25707: infinite loop in e1000e_write_packet_to_guest() in hw/net/e1000e_core.c. (bsc#1178683)
    - CVE-2020-15863: stack-based overflow in xgmac_enet_send() in hw/net/xgmac.c. (bsc#1174386)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for qemu fixes the following issues :

Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)

Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation (CVE-2020-13362 bsc#1172383)

Fix use-after-free in usb xhci packet handling (CVE-2020-25723, bsc#1178934)

Fix use-after-free in usb ehci packet handling (CVE-2020-25084, bsc#1176673)

Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624, bsc#1176682)

Fix infinite loop (DoS) in usb hcd-ohci emulation (CVE-2020-25625, bsc#1176684)

Fix guest triggerable assert in shared network handling code (CVE-2020-27617, bsc#1178174)

Fix infinite loop (DoS) in e1000e device emulation (CVE-2020-28916, bsc#1179468)

Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)

Fix NULL pointer deref. (DoS) in mmio ops (CVE-2020-15469, bsc#1173612)

Fix infinite loop (DoS) in e1000 device emulation (CVE-2021-20257, bsc#1182577)

Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968)

Fix OOB access (stack overflow) in other NIC emulations (CVE-2021-3416)

Fix OOB access in SLIRP ARP packet processing (CVE-2020-29130, bsc#1179467)

Fix NULL pointer dereference possibility (DoS) in MegaRAID SAS 8708EM2 emulation (CVE-2020-13659 bsc#1172386

Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)

Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)

Fix buffer overflow in the XGMAC device (CVE-2020-15863, bsc#1174386)

Fix DoS in packet processing of various emulated NICs (CVE-2020-16092 bsc#1174641)

Fix OOB access while processing USB packets (CVE-2020-14364 bsc#1175441)

Fix package scripts to not use hard-coded paths for temporary working directories and log files (bsc#1182425)

Fix potential privilege escalation in virtfs (CVE-2021-20181 bsc#1182137)

Fix OOB access possibility in ES1370 audio device emulation (CVE-2020-13361 bsc#1172384)

Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3099 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3099-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Abhijith PA     September 05, 2022                            https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : qemu     Version        : 1:3.1+dfsg-8+deb10u9     CVE ID         : CVE-2020-13253 CVE-2020-15469 CVE-2020-15859 CVE-2020-25084                      CVE-2020-25085 CVE-2020-25624 CVE-2020-25625 CVE-2020-25723                      CVE-2020-27617 CVE-2020-27821 CVE-2020-28916 CVE-2020-29129                      CVE-2020-29443 CVE-2020-35504 CVE-2020-35505 CVE-2021-3392                      CVE-2021-3416 CVE-2021-3507 CVE-2021-3527 CVE-2021-3582                      CVE-2021-3607 CVE-2021-3608 CVE-2021-3682 CVE-2021-3713                      CVE-2021-3748 CVE-2021-3930 CVE-2021-4206 CVE-2021-4207                      CVE-2021-20181 CVE-2021-20196 CVE-2021-20203 CVE-2021-20221                      CVE-2021-20257 CVE-2022-26354 CVE-2022-35414

    Multiple security issues were discovered in QEMU, a fast processor     emulator, which could result in denial of service or the the execution     of arbitrary code.

    For Debian 10 buster, these problems have been fixed in version     1:3.1+dfsg-8+deb10u9.

    We recommend that you upgrade your qemu packages.

    For the detailed security status of qemu please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/qemu

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for qemu fixes the following issues :

  - CVE-2020-12829: Fix OOB access in sm501 device emulation     (bsc#1172385)

  - CVE-2020-25723: Fix use-after-free in usb xhci packet     handling (bsc#1178934)

  - CVE-2020-25084: Fix use-after-free in usb ehci packet     handling (bsc#1176673)

  - CVE-2020-25625: Fix infinite loop (DoS) in usb hcd-ohci     emulation (bsc#1176684)

  - CVE-2020-25624: Fix OOB access in usb hcd-ohci emulation     (bsc#1176682)

  - CVE-2020-27617: Fix guest triggerable assert in shared     network handling code (bsc#1178174)

  - CVE-2020-28916: Fix infinite loop (DoS) in e1000e device     emulation (bsc#1179468)

  - CVE-2020-29443: Fix OOB access in atapi emulation     (bsc#1181108)

  - CVE-2020-27821: Fix heap overflow in MSIx emulation     (bsc#1179686)

  - CVE-2020-15469: Fix NULL pointer deref. (DoS) in mmio     ops (bsc#1173612)

  - CVE-2021-20257: Fix infinite loop (DoS) in e1000 device     emulation (bsc#1182577)

  - CVE-2021-3416: Fix OOB access (stack overflow) in     rtl8139 NIC emulation (bsc#1182968)

  - CVE-2021-3416: Fix OOB access (stack overflow) in other     NIC emulations (bsc#1182968)

  - CVE-2020-27616: Fix OOB access in ati-vga emulation     (bsc#1178400)

  - CVE-2020-29129: Fix OOB access in SLIRP ARP/NCSI packet     processing (bsc#1179466, CVE-2020-29130, bsc#1179467)

  - Fix package scripts to not use hard coded paths for     temporary working directories and log files     (bsc#1182425)

  - Add split-provides through forsplits/13 to cover updates     of SLE15-SP2 to SLE15-SP3, and openSUSE equivalents     (bsc#1184064)

  - Added a few more usability improvements for our git     packaging workflow

This update was imported from the SUSE:SLE-15-SP2:Update update project.

ID	名稱	產品	系列	已發布	已更新	嚴重性
150299	Oracle Linux 7 : qemu (ELSA-2021-9285)	Nessus	Oracle Linux Local Security Checks	2021/6/6	2024/11/1	medium
320399	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS : QEMU vulnerabilities (USN-8412-1)	Nessus	Ubuntu Local Security Checks	2026/6/11	2026/6/11	high
148632	EulerOS Virtualization 2.9.0 : qemu (EulerOS-SA-2021-1763)	Nessus	Huawei Local Security Checks	2021/4/15	2024/1/4	medium
223308	Linux Distros Unpatched Vulnerability : CVE-2020-15469	Nessus	Misc.	2025/3/4	2026/6/28	low
152199	SUSE SLES11 Security Update : kvm (SUSE-SU-2021:14772-1)	Nessus	SuSE Local Security Checks	2021/8/4	2025/9/24	medium
148758	SUSE SLES12 Security Update : qemu (SUSE-SU-2021:1240-1)	Nessus	SuSE Local Security Checks	2021/4/19	2024/1/3	high
164678	Debian dla-3099 : qemu - security update	Nessus	Debian Local Security Checks	2022/9/5	2025/1/22	high
149640	openSUSE Security Update : qemu (openSUSE-2021-600)	Nessus	SuSE Local Security Checks	2021/5/18	2024/1/1	medium

偵測

搜尋 Plugin

medium

high

medium

low

medium

high

high

medium