Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2012-6075
HistoryFeb 13, 2013 - 1:55 a.m.

CVE-2012-6075

2013-02-1301:55:03
CWE-120
[email protected]
web.nvd.nist.gov
1

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.023 Low

EPSS

Percentile

89.8%

JSON

Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disabled, allows remote attackers to cause a denial of service (guest OS crash) and possibly execute arbitrary guest code via a large packet.

Affected configurations

NVD
Node
qemuqemuRange<1.3.0
Node
fedoraprojectfedoraMatch16
OR
fedoraprojectfedoraMatch17
OR
fedoraprojectfedoraMatch18
Node
opensuseopensuseMatch12.1
OR
opensuseopensuseMatch12.2
OR
suselinux_enterprise_serverMatch11sp1ltss
Node
redhatenterprise_linux_desktopMatch5.0
OR
redhatenterprise_linux_desktopMatch6.0
OR
redhatenterprise_linux_eusMatch5.9
OR
redhatenterprise_linux_eusMatch6.4
OR
redhatenterprise_linux_serverMatch5.0
OR
redhatenterprise_linux_serverMatch6.0
OR
redhatenterprise_linux_server_ausMatch5.9
OR
redhatenterprise_linux_server_ausMatch6.4
OR
redhatenterprise_linux_workstationMatch5.0
OR
redhatenterprise_linux_workstationMatch6.0
Node
redhatvirtualizationMatch3.0
AND
redhatenterprise_linuxMatch6.0
Node
debiandebian_linuxMatch6.0
Node
canonicalubuntu_linuxMatch10.04-
OR
canonicalubuntu_linuxMatch11.10
OR
canonicalubuntu_linuxMatch12.04esm
OR
canonicalubuntu_linuxMatch12.10

References

Related

nessus 32
openvas 97
centos 3
debian 3
ubuntu 1
redhat 6
ubuntucve 1
securityvulns 2
oraclelinux 4
prion 1
xen 1
osv 2
fedora 37
veracode 1
debiancve 1
cve 1
cvelist 1
suse 1
gentoo 1
nessus
nessus
Debian DSA-2619-1 : xen-qemu-dm-4.0 - buffer overflow
2013-02-11 00:00:00
Scientific Linux Security Update : qemu-kvm on SL6.x i386/x86_64 (20130307)
2013-03-08 00:00:00
RHEL 6 : qemu-kvm (RHSA-2013:0609)
2013-03-08 00:00:00
openvas
openvas
RedHat Update for xen RHSA-2013:0599-01
2013-03-08 00:00:00
Ubuntu Update for qemu-kvm USN-1692-1
2013-01-21 00:00:00
CentOS Update for kmod-kvm CESA-2013:0608 centos5
2013-03-12 00:00:00
centos
centos
qemu security update
2013-03-09 00:45:27
xen security update
2013-03-06 19:54:46
kmod, kvm security update
2013-03-08 00:28:36
debian
debian
[SECURITY] [DSA 2608-1] qemu security update
2013-01-15 20:38:41
[SECURITY] [DSA 2619-1] xen-qemu-dm-4.0 security update
2013-02-10 18:22:33
[SECURITY] [DSA 2607-1] qemu-kvm security update
2013-01-15 20:26:24
ubuntu
ubuntu
QEMU vulnerability
2013-01-16 00:00:00
redhat
redhat
(RHSA-2013:0609) Important: qemu-kvm security update
2013-03-07 00:00:00
(RHSA-2013:0608) Important: kvm security update
2013-03-07 00:00:00
(RHSA-2013:0610) Important: qemu-kvm-rhev security update
2013-03-07 00:00:00
ubuntucve
ubuntucve
CVE-2012-6075
2012-12-31 00:00:00
securityvulns
securityvulns
qemu buffer overflow
2013-01-21 00:00:00
[SECURITY] [DSA 2608-1] qemu security update
2013-01-21 00:00:00
oraclelinux
oraclelinux
kvm security update
2013-03-07 00:00:00
qemu-kvm security update
2013-03-07 00:00:00
xen security update
2013-03-06 00:00:00
prion
prion
Buffer overflow
2013-02-13 01:55:00
xen
xen
qemu (e1000 device driver): Buffer overflow when processing large packets
2013-01-16 14:50:00
osv
osv
qemu-kvm - buffer overflow
2013-01-15 00:00:00
qemu - buffer overflow
2013-01-15 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: qemu-1.2.2-2.fc18
2013-01-26 16:03:36
[SECURITY] Fedora 18 Update: qemu-1.2.2-11.fc18
2013-04-26 00:54:36
[SECURITY] Fedora 17 Update: qemu-1.0.1-3.fc17
2013-01-26 15:56:23
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:59:10
debiancve
debiancve
CVE-2012-6075
2013-02-13 01:55:03
cve
cve
CVE-2012-6075
2013-02-13 01:55:03
cvelist
cvelist
CVE-2012-6075
2013-02-13 01:00:00
suse
suse
Security update for Xen (important)
2014-03-25 23:04:15
gentoo
gentoo
Xen: Multiple vulnerabilities
2013-09-27 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.023 Low

EPSS

Percentile

89.8%

JSON
Related for NVD:CVE-2012-6075
nessus32openvas97centos3debian3ubuntu1redhat6ubuntucve1securityvulns2oraclelinux4prion1xen1osv2fedora37veracode1debiancve1cve1cvelist1suse1gentoo1