Lucene search
UbuntuUSN-1692-1HistoryJan 16, 2013 - 12:00 a.m.
QEMU vulnerability
2013-01-1600:00:00
ubuntu.com
39
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.4 High
AI Score
Confidence
Low
0.023 Low
EPSS
Percentile
89.8%
Releases
- Ubuntu 12.10
- Ubuntu 12.04
- Ubuntu 11.10
- Ubuntu 10.04
Packages
- qemu-kvm - Machine emulator and virtualizer
Details
It was discovered that QEMU incorrectly handled certain e1000 packet sizes.
In certain environments, an attacker may use this flaw in combination with
large packets to cause a denial of service or execute arbitrary code in the
guest.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 12.10 | noarch | qemu-kvm | < 1.2.0+noroms-0ubuntu2.12.10.2 | UNKNOWN |
| Ubuntu | 12.10 | noarch | kvm | < 1:84+dfsg-0ubuntu16+1.2.0+noroms+0ubuntu2.12.10.2 | UNKNOWN |
| Ubuntu | 12.10 | noarch | qemu | < 1.2.0+noroms-0ubuntu2.12.10.2 | UNKNOWN |
| Ubuntu | 12.10 | noarch | qemu-utils | < 1.2.0+noroms-0ubuntu2.12.10.2 | UNKNOWN |
| Ubuntu | 12.04 | noarch | qemu-kvm | < 1.0+noroms-0ubuntu14.7 | UNKNOWN |
| Ubuntu | 12.04 | noarch | kvm | < 1:84+dfsg-0ubuntu16+1.0+noroms+0ubuntu14.7 | UNKNOWN |
| Ubuntu | 12.04 | noarch | qemu | < 1.0+noroms-0ubuntu14.7 | UNKNOWN |
| Ubuntu | 12.04 | noarch | qemu-utils | < 1.0+noroms-0ubuntu14.7 | UNKNOWN |
| Ubuntu | 11.10 | noarch | qemu-kvm | < 0.14.1+noroms-0ubuntu6.6 | UNKNOWN |
| Ubuntu | 11.10 | noarch | kvm | < 1:84+dfsg-0ubuntu16+0.14.1+noroms+0ubuntu6.6 | UNKNOWN |
References
Related
nessus
nessus
Debian DSA-2619-1 : xen-qemu-dm-4.0 - buffer overflow
2013-02-11 00:00:00
Scientific Linux Security Update : qemu-kvm on SL6.x i386/x86_64 (20130307)
2013-03-08 00:00:00
RHEL 6 : qemu-kvm (RHSA-2013:0609)
2013-03-08 00:00:00
openvas
openvas
RedHat Update for xen RHSA-2013:0599-01
2013-03-08 00:00:00
Ubuntu Update for qemu-kvm USN-1692-1
2013-01-21 00:00:00
CentOS Update for kmod-kvm CESA-2013:0608 centos5
2013-03-12 00:00:00
centos
centos
qemu security update
2013-03-09 00:45:27
xen security update
2013-03-06 19:54:46
kmod, kvm security update
2013-03-08 00:28:36
debian
debian
[SECURITY] [DSA 2608-1] qemu security update
2013-01-15 20:38:41
[SECURITY] [DSA 2619-1] xen-qemu-dm-4.0 security update
2013-02-10 18:22:33
[SECURITY] [DSA 2607-1] qemu-kvm security update
2013-01-15 20:26:24
redhat
redhat
(RHSA-2013:0609) Important: qemu-kvm security update
2013-03-07 00:00:00
(RHSA-2013:0608) Important: kvm security update
2013-03-07 00:00:00
(RHSA-2013:0610) Important: qemu-kvm-rhev security update
2013-03-07 00:00:00
ubuntucve
ubuntucve
CVE-2012-6075
2012-12-31 00:00:00
securityvulns
securityvulns
qemu buffer overflow
2013-01-21 00:00:00
[SECURITY] [DSA 2608-1] qemu security update
2013-01-21 00:00:00
oraclelinux
oraclelinux
qemu-kvm security update
2013-03-07 00:00:00
xen security update
2013-03-06 00:00:00
kvm security update
2013-03-07 00:00:00
xen
xen
qemu (e1000 device driver): Buffer overflow when processing large packets
2013-01-16 14:50:00
osv
osv
qemu-kvm - buffer overflow
2013-01-15 00:00:00
qemu - buffer overflow
2013-01-15 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: qemu-1.2.2-2.fc18
2013-01-26 16:03:36
[SECURITY] Fedora 18 Update: qemu-1.2.2-11.fc18
2013-04-26 00:54:36
[SECURITY] Fedora 17 Update: qemu-1.0.1-3.fc17
2013-01-26 15:56:23
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:59:10
debiancve
debiancve
CVE-2012-6075
2013-02-13 01:55:03
prion
prion
Buffer overflow
2013-02-13 01:55:00
nvd
nvd
CVE-2012-6075
2013-02-13 01:55:03
cvelist
cvelist
CVE-2012-6075
2013-02-13 01:00:00
cve
cve
CVE-2012-6075
2013-02-13 01:55:03
suse
suse
Security update for Xen (important)
2014-03-25 23:04:15
gentoo
gentoo
Xen: Multiple vulnerabilities
2013-09-27 00:00:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.4 High
AI Score
Confidence
Low
0.023 Low
EPSS
Percentile
89.8%
Related for USN-1692-1