Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2012-6075

Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disabled, allows remote attackers to cause a denial of service (guest OS crash) and possibly execute arbitrary guest code via a large packet.

Published

2013-02-13T01:55:03.027

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.6

Impact Score

10.0

Weaknesses

Type: Primary
CWE-120

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	qemu	qemu	< 1.3.0	Yes
Operating System	fedoraproject	fedora	16	Yes
Operating System	fedoraproject	fedora	17	Yes
Operating System	fedoraproject	fedora	18	Yes
Operating System	opensuse	opensuse	12.1	Yes
Operating System	opensuse	opensuse	12.2	Yes
Operating System	suse	linux_enterprise_server	11	Yes
Operating System	redhat	enterprise_linux_desktop	5.0	Yes
Operating System	redhat	enterprise_linux_desktop	6.0	Yes
Operating System	redhat	enterprise_linux_eus	5.9	Yes
Operating System	redhat	enterprise_linux_eus	6.4	Yes
Operating System	redhat	enterprise_linux_server	5.0	Yes
Operating System	redhat	enterprise_linux_server	6.0	Yes
Operating System	redhat	enterprise_linux_server_aus	5.9	Yes
Operating System	redhat	enterprise_linux_server_aus	6.4	Yes
Operating System	redhat	enterprise_linux_workstation	5.0	Yes
Operating System	redhat	enterprise_linux_workstation	6.0	Yes
Application	redhat	virtualization	3.0	Yes
Operating System	redhat	enterprise_linux	6.0	No
Operating System	debian	debian_linux	6.0	Yes
Operating System	canonical	ubuntu_linux	10.04	Yes
Operating System	canonical	ubuntu_linux	11.10	Yes
Operating System	canonical	ubuntu_linux	12.04	Yes
Operating System	canonical	ubuntu_linux	12.10	Yes

References

http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=b0d9ffcd0251161c7c92f94804dcf599dfa3edeb ([email protected])
http://lists.fedoraproject.org/pipermail/package-announce/2013-January/097541.html Third Party Advisory ([email protected])
http://lists.fedoraproject.org/pipermail/package-announce/2013-January/097575.html Third Party Advisory ([email protected])
http://lists.fedoraproject.org/pipermail/package-announce/2013-January/097705.html Third Party Advisory ([email protected])
http://lists.nongnu.org/archive/html/qemu-devel/2012-12/msg00533.html Patch, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2013-0599.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2013-0608.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2013-0609.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2013-0610.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2013-0639.html Third Party Advisory ([email protected])
http://secunia.com/advisories/55082 Third Party Advisory ([email protected])
http://security.gentoo.org/glsa/glsa-201309-24.xml Third Party Advisory ([email protected])
http://www.debian.org/security/2013/dsa-2607 Third Party Advisory ([email protected])
http://www.debian.org/security/2013/dsa-2608 Third Party Advisory ([email protected])
http://www.debian.org/security/2013/dsa-2619 Third Party Advisory ([email protected])
http://www.openwall.com/lists/oss-security/2012/12/30/1 Mailing List, Third Party Advisory ([email protected])
http://www.securityfocus.com/bid/57420 Third Party Advisory, VDB Entry ([email protected])
http://www.ubuntu.com/usn/USN-1692-1 Third Party Advisory ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=889301 Issue Tracking, Third Party Advisory ([email protected])
http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=b0d9ffcd0251161c7c92f94804dcf599dfa3edeb (af854a3a-2127-422b-91ae-364da2661108)
http://lists.fedoraproject.org/pipermail/package-announce/2013-January/097541.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.fedoraproject.org/pipermail/package-announce/2013-January/097575.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.fedoraproject.org/pipermail/package-announce/2013-January/097705.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.nongnu.org/archive/html/qemu-devel/2012-12/msg00533.html Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2013-0599.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2013-0608.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2013-0609.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2013-0610.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2013-0639.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/55082 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://security.gentoo.org/glsa/glsa-201309-24.xml Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2013/dsa-2607 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2013/dsa-2608 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2013/dsa-2619 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2012/12/30/1 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/57420 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/USN-1692-1 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=889301 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)