CVE-2012-0029

Published: Jan 27, 2012Modified: Apr 29, 2026

7.4

Vector

AV:A/AC:M/Au:S/C:C/I:C/A:C

Exploitability: 4.4 / Impact: 10.0

Source: NVD

Description

Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.

Affected (1)

Products: Kvm Group: Qemu Kvm

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Kvm Group Qemu Kvm	Version 0.12

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (30)

http://git.qemu.org/?p=qemu.git%3Ba=log%3Bh=refs/heads/stable-1.0

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2012-02/msg00009.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2012-0370.html

Source: secalert@redhat.com

http://secunia.com/advisories/47740

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/47741

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/47992

Source: secalert@redhat.com

http://secunia.com/advisories/48318

Source: secalert@redhat.com

http://secunia.com/advisories/50913

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2012-0050.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/51642

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1339-1

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=772075

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/72656

Source: secalert@redhat.com

http://git.qemu.org/?p=qemu.git%3Ba=log%3Bh=refs/heads/stable-1.0

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2012-02/msg00009.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2012-0370.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/47740

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/47741

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/47992

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/48318

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/50913

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2012-0050.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/51642

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1339-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=772075

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/72656

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.