CVE-2012-0029

Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.4 UNKNOWN
ADJACENT_NETWORK
MEDIUM
AV:A/AC:M/Au:S/C:C/I:C/A:C
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 76%
VendorProductVersion
kvm_groupqemu-kvm
0.12
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
xen
bullseye
4.14.6-1
fixed
squeeze
not-affected
bullseye (security)
4.14.5+94-ge49571868d-1
fixed
bookworm
4.17.3+10-g091466ba55-1~deb12u1
fixed
sid
4.17.3+36-g54dacb5c02-1
fixed
trixie
4.17.3+36-g54dacb5c02-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
kvm
oneiric
dne
natty
dne
maverick
dne
lucid
dne
hardy
ignored
qemu
oneiric
dne
natty
dne
maverick
dne
lucid
dne
hardy
ignored
qemu-kvm
oneiric
Fixed 0.14.1+noroms-0ubuntu6.2
released
natty
Fixed 0.14.0+noroms-0ubuntu4.5
released
maverick
Fixed 0.12.5+noroms-0ubuntu7.11
released
lucid
Fixed 0.12.3+noroms-0ubuntu9.17
released
hardy
dne
Common Weakness Enumeration
References
http://git.qemu.org/?p=qemu.git%3Ba=log%3Bh=refs/heads/stable-1.0
http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html
http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html
http://lists.opensuse.org/opensuse-updates/2012-02/msg00009.html
http://rhn.redhat.com/errata/RHSA-2012-0370.html
http://secunia.com/advisories/47740
http://secunia.com/advisories/47741
http://secunia.com/advisories/47992
http://secunia.com/advisories/48318
http://secunia.com/advisories/50913
http://www.redhat.com/support/errata/RHSA-2012-0050.html
http://www.securityfocus.com/bid/51642
http://www.ubuntu.com/usn/USN-1339-1
https://bugzilla.redhat.com/show_bug.cgi?id=772075
https://exchange.xforce.ibmcloud.com/vulnerabilities/72656
http://git.qemu.org/?p=qemu.git%3Ba=log%3Bh=refs/heads/stable-1.0
http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html
http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html
http://lists.opensuse.org/opensuse-updates/2012-02/msg00009.html
http://rhn.redhat.com/errata/RHSA-2012-0370.html
http://secunia.com/advisories/47740
http://secunia.com/advisories/47741
http://secunia.com/advisories/47992
http://secunia.com/advisories/48318
http://secunia.com/advisories/50913
http://www.redhat.com/support/errata/RHSA-2012-0050.html
http://www.securityfocus.com/bid/51642
http://www.ubuntu.com/usn/USN-1339-1
https://bugzilla.redhat.com/show_bug.cgi?id=772075
https://exchange.xforce.ibmcloud.com/vulnerabilities/72656