ID de Prueba:	1.3.6.1.4.1.25623.1.0.856105
Categoría:	openSUSE Local Security Checks
Título:	openSUSE Security Advisory (SUSE-SU-2024:1438-1)
Resumen:	The remote host is missing an update for the 'qemu' package(s) announced via the SUSE-SU-2024:1438-1 advisory.
Descripción:	Summary: The remote host is missing an update for the 'qemu' package(s) announced via the SUSE-SU-2024:1438-1 advisory. Vulnerability Insight: This update for qemu fixes the following issues: - CVE-2024-3447: Fixed heap buffer overflow in sdhci_write_dataport() (bsc#1222845) - CVE-2023-6683: Fixed NULL pointer dereference in qemu_clipboard_request() (bsc#1218889) - CVE-2024-3446: Fixed DMA reentrancy issue leads to double free vulnerability (bsc#1222843) - CVE-2023-3019: Fixed heap use-after-free in e1000e_write_packet_to_guest() (bsc#1213269) Affected Software/OS: 'qemu' package(s) on openSUSE Leap 15.5. Solution: Please install the updated package(s). CVSS Score: 6.5 CVSS Vector: AV:L/AC:L/Au:M/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2023-3019 RHBZ#2222351 https://bugzilla.redhat.com/show_bug.cgi?id=2222351 RHSA-2024:0135 https://access.redhat.com/errata/RHSA-2024:0135 RHSA-2024:0404 https://access.redhat.com/errata/RHSA-2024:0404 RHSA-2024:0569 https://access.redhat.com/errata/RHSA-2024:0569 RHSA-2024:2135 https://access.redhat.com/errata/RHSA-2024:2135 https://access.redhat.com/security/cve/CVE-2023-3019 https://security.netapp.com/advisory/ntap-20230831-0005/ Common Vulnerability Exposure (CVE) ID: CVE-2023-6683 RHBZ#2254825 https://bugzilla.redhat.com/show_bug.cgi?id=2254825 RHSA-2024:2962 https://access.redhat.com/errata/RHSA-2024:2962 https://access.redhat.com/security/cve/CVE-2023-6683 https://security.netapp.com/advisory/ntap-20240223-0001/ Common Vulnerability Exposure (CVE) ID: CVE-2024-3446 RHBZ#2274211 https://bugzilla.redhat.com/show_bug.cgi?id=2274211 https://access.redhat.com/security/cve/CVE-2024-3446 https://patchew.org/QEMU/20240409105537.18308-1-philmd@linaro.org/ Common Vulnerability Exposure (CVE) ID: CVE-2024-3447
Copyright	Copyright (C) 2024 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.