CVE-2012-0029

CVSS V2 High 7.4 CVSS V3 None
Description
Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.
Overview
  • CVE ID
  • CVE-2012-0029
  • Assigner
  • secalert@redhat.com
  • Vulnerability Status
  • Modified
  • Published Version
  • 2012-01-27T15:55:04
  • Last Modified Date
  • 2023-02-13T00:22:33
Weakness Enumerations
CWE URL
CWE-119 http://cwe.mitre.org/data/definitions/119.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:kvm_group:qemu-kvm:0.12:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:A/AC:M/Au:S/C:C/I:C/A:C
  • Access Vector
  • ADJACENT_NETWORK
  • Access Compatibility
  • MEDIUM
  • Authentication
  • SINGLE
  • Confidentiality Impact
  • COMPLETE
  • Integrity Impact
  • COMPLETE
  • Availability Impact
  • COMPLETE
  • Base Score
  • 7.4
  • Severity
  • HIGH
  • Exploitability Score
  • 4.4
  • Impact Score
  • 10
References
Reference URL Reference Tags
http://git.qemu.org/?p=qemu.git%3Ba=log%3Bh=refs/heads/stable-1.0
http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html
http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html
http://lists.opensuse.org/opensuse-updates/2012-02/msg00009.html
http://rhn.redhat.com/errata/RHSA-2012-0370.html
http://www.redhat.com/support/errata/RHSA-2012-0050.html
http://www.securityfocus.com/bid/51642
http://www.ubuntu.com/usn/USN-1339-1
https://access.redhat.com/errata/RHSA-2012:0050
https://access.redhat.com/errata/RHSA-2012:0051
https://access.redhat.com/errata/RHSA-2012:0109
https://access.redhat.com/errata/RHSA-2012:0168
https://access.redhat.com/errata/RHSA-2012:0370
https://access.redhat.com/security/cve/CVE-2012-0029
https://bugzilla.redhat.com/show_bug.cgi?id=772075
https://exchange.xforce.ibmcloud.com/vulnerabilities/72656
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2012-0029
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0029
History
Created Old Value New Value Data Type Notes
2022-05-10 08:51:46 Added to TrackCVE
2023-02-02 19:03:21 2023-02-02T18:15:32 CVE Modified Date updated
2023-02-02 19:03:22 Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets. CVE-2012-0029 qemu: e1000: process_tx_desc legacy mode packets heap overflow Description updated
2023-02-02 19:03:24 References updated
2023-02-13 01:03:40 2023-02-13T00:22:33 CVE Modified Date updated
2023-02-13 01:03:41 CVE-2012-0029 qemu: e1000: process_tx_desc legacy mode packets heap overflow Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets. Description updated