[SECURITY] [DSA 2619-1] xen-qemu-dm-4.0 security update

2013-02-1018:22:33

lists.debian.org

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

Low

0.023 Low

EPSS

Percentile

89.8%

JSON

Debian Security Advisory DSA-2619-1 [email protected]
http://www.debian.org/security/ Moritz Muehlenhoff
February 10, 2013 http://www.debian.org/security/faq

Package : xen-qemu-dm-4.0
Vulnerability : buffer overflow
Problem type : remote
Debian-specific: no
CVE ID : CVE-2012-6075

A buffer overflow was found in the e1000e emulation, which could be
triggered when processing jumbo frames.

For the stable distribution (squeeze), this problem has been fixed in
version 4.0.1-2+squeeze3.

For the unstable distribution (sid), this problem has been fixed in
version 4.1.3-8 of the xen source package.

We recommend that you upgrade your xen-qemu-dm-4.0 packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian6sparcqemu-user-static< 0.12.5+dfsg-3squeeze3qemu-user-static_0.12.5+dfsg-3squeeze3_sparc.deb
Debian6mipsqemu-user< 0.12.5+dfsg-3squeeze3qemu-user_0.12.5+dfsg-3squeeze3_mips.deb
Debian6amd64qemu-kvm< 0.12.5+dfsg-5+squeeze10qemu-kvm_0.12.5+dfsg-5+squeeze10_amd64.deb
Debian6i386qemu-user-static< 0.12.5+dfsg-3squeeze3qemu-user-static_0.12.5+dfsg-3squeeze3_i386.deb
Debian6mipselqemu-user< 0.12.5+dfsg-3squeeze3qemu-user_0.12.5+dfsg-3squeeze3_mipsel.deb
Debian6powerpcqemu-utils< 0.12.5+dfsg-3squeeze3qemu-utils_0.12.5+dfsg-3squeeze3_powerpc.deb
Debian6powerpcqemu-user-static< 0.12.5+dfsg-3squeeze3qemu-user-static_0.12.5+dfsg-3squeeze3_powerpc.deb
Debian6powerpcqemu< 0.12.5+dfsg-3squeeze3qemu_0.12.5+dfsg-3squeeze3_powerpc.deb
Debian6kfreebsd-amd64qemu-system< 0.12.5+dfsg-3squeeze3qemu-system_0.12.5+dfsg-3squeeze3_kfreebsd-amd64.deb
Debian6powerpcqemu-system< 0.12.5+dfsg-3squeeze3qemu-system_0.12.5+dfsg-3squeeze3_powerpc.deb

OS	Version	Architecture	Package	Version	Filename
Debian	6	sparc	qemu-user-static	< 0.12.5+dfsg-3squeeze3	qemu-user-static_0.12.5+dfsg-3squeeze3_sparc.deb
Debian	6	mips	qemu-user	< 0.12.5+dfsg-3squeeze3	qemu-user_0.12.5+dfsg-3squeeze3_mips.deb
Debian	6	amd64	qemu-kvm	< 0.12.5+dfsg-5+squeeze10	qemu-kvm_0.12.5+dfsg-5+squeeze10_amd64.deb
Debian	6	i386	qemu-user-static	< 0.12.5+dfsg-3squeeze3	qemu-user-static_0.12.5+dfsg-3squeeze3_i386.deb
Debian	6	mipsel	qemu-user	< 0.12.5+dfsg-3squeeze3	qemu-user_0.12.5+dfsg-3squeeze3_mipsel.deb
Debian	6	powerpc	qemu-utils	< 0.12.5+dfsg-3squeeze3	qemu-utils_0.12.5+dfsg-3squeeze3_powerpc.deb
Debian	6	powerpc	qemu-user-static	< 0.12.5+dfsg-3squeeze3	qemu-user-static_0.12.5+dfsg-3squeeze3_powerpc.deb
Debian	6	powerpc	qemu	< 0.12.5+dfsg-3squeeze3	qemu_0.12.5+dfsg-3squeeze3_powerpc.deb
Debian	6	kfreebsd-amd64	qemu-system	< 0.12.5+dfsg-3squeeze3	qemu-system_0.12.5+dfsg-3squeeze3_kfreebsd-amd64.deb
Debian	6	powerpc	qemu-system	< 0.12.5+dfsg-3squeeze3	qemu-system_0.12.5+dfsg-3squeeze3_powerpc.deb