Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2012-0029
HistoryJan 27, 2012 - 3:55 p.m.

CVE-2012-0029

2012-01-2715:55:00
Debian Security Bug Tracker
security-tracker.debian.org
15

7.4 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:S/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

36.7%

Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.

OSVersionArchitecturePackageVersionFilename
Debian12allxen< 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1xen_4.1.3~rc1+hg-20120614.a9c0a89c08f2-1_all.deb
Debian11allxen< 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1xen_4.1.3~rc1+hg-20120614.a9c0a89c08f2-1_all.deb
Debian10allxen< 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1xen_4.1.3~rc1+hg-20120614.a9c0a89c08f2-1_all.deb
Debian999allxen< 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1xen_4.1.3~rc1+hg-20120614.a9c0a89c08f2-1_all.deb
Debian13allxen< 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1xen_4.1.3~rc1+hg-20120614.a9c0a89c08f2-1_all.deb

7.4 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:S/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

36.7%