The remote host is affected by the vulnerability described in GLSA-201408-17 (QEMU: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in QEMU. Please review the       CVE identifiers referenced below for details.
  Impact :

    A local attacker could possibly execute arbitrary code with the       privileges of the process, or cause a Denial of       Service condition.
  Workaround :

    There is no known workaround at this time.

リモートホストは、GLSA-201408-17 で説明されている脆弱性の影響を受けます（QEMU：複数の脆弱性）

QEMU に複数の脆弱性が発見されました。詳細については、以下で参照されている CVE 識別子をレビューしてください。
 影響：

ローカルの攻撃者が、プロセスの権限で任意のコードを実行する可能性や、サービス拒否状態を引き起こす可能性があります。
 回避策：

現時点で、既知の回避策はありません。

Multiple vulnerabilities have been found in Qemu.

Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and possibly other products, might allow local users to execute arbitrary code via unspecified vectors related to attempting to mark non-existent regions as dirty, aka the bitblt heap overflow.
(CVE-2007-1320)

Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 receive integer signedness error.
(CVE-2007-1321)

QEMU 0.8.2 allows local users to halt a virtual machine by executing the icebp instruction. (CVE-2007-1322)

QEMU 0.8.2 allows local users to crash a virtual machine via the divisor operand to the aam instruction, as demonstrated by aam 0x0, which triggers a divide-by-zero error. (CVE-2007-1366)

The NE2000 emulator in QEMU 0.8.2 allows local users to execute arbitrary code by writing Ethernet frames with a size larger than the MTU to the EN0_TCNT register, which triggers a heap-based buffer overflow in the slirp library, aka NE2000 mtu heap overflow.
(CVE-2007-5729)

Heap-based buffer overflow in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to execute arbitrary code via crafted data in the net socket listen option, aka QEMU net socket heap overflow. (CVE-2007-5730)

QEMU 0.9.0 allows local users of a Windows XP SP2 guest operating system to overwrite the TranslationBlock (code_gen_buffer) buffer, and probably have unspecified other impacts related to an overflow, via certain Windows executable programs, as demonstrated by qemu-dos.com.
(CVE-2007-6227)

Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges to access arbitrary memory and escape the virtual machine.
(CVE-2008-0928)

Changing removable media in QEMU could trigger a bug similar to CVE-2008-2004, which would allow local guest users to read arbitrary files on the host by modifying the header of the image to identify a different format. (CVE-2008-1945) See the diskformat: parameter to the
-usbdevice option.

The drive_init function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted.
(CVE-2008-2004) See the -format option.

The updated packages have been patched to fix these issues.

SecurityFocus reports :

QEMU is prone to a local denial-of-service vulnerability because it fails to perform adequate boundary checks when handling user-supplied input.

Attackers can exploit this issue to cause denial-of-service conditions. Given the nature of the issue, attackers may also be able to execute arbitrary code, but this has not been confirmed.

遠端主機受到 GLSA-201408-17 中所述的弱點影響 (QEMU：多個弱點)

在 QEMU 中發現多個弱點。如需詳細資訊，請檢閱以下提及的 CVE 識別碼。
 影響：

本機攻擊者可能以處理程序的權限執行任意程式碼，或造成拒絕服務情況。
 因應措施：

目前尚無已知的因應措施。

远程主机受到 GLSA-201408-17 中所述漏洞的影响（QEMU：多种漏洞）

已在 QEMU 中发现多种漏洞。请检查下面引用的 CVE 标识符以了解详细信息。
 影响：

本地攻击者可能以该进程的权限执行任意代码或造成拒绝服务情况。
 变通方案：

目前无任何已知的变通方案。

ID	名稱	產品	系列	已發布	已更新	嚴重性
77461	GLSA-201408-17 : QEMU: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2014/8/30	2021/1/6	high
77461	GLSA-201408-17：QEMU：複数の脆弱性	Nessus	Gentoo Local Security Checks	2014/8/30	2021/1/6	high
37509	Mandriva Linux Security Advisory : qemu (MDVSA-2008:162)	Nessus	Mandriva Local Security Checks	2009/4/23	2021/1/6	high
29689	FreeBSD : qemu -- Translation Block Local Denial of Service Vulnerability (30f5ca1d-a90b-11dc-bf13-0211060005df)	Nessus	FreeBSD Local Security Checks	2007/12/13	2021/1/6	high
77461	GLSA-201408-17：QEMU：多個弱點	Nessus	Gentoo Local Security Checks	2014/8/30	2021/1/6	high
77461	GLSA-201408-17：QEMU：多种漏洞	Nessus	Gentoo Local Security Checks	2014/8/30	2021/1/6	high

偵測

搜尋 Plugin

high

high

high

high

high

high