CVE-2012-0029

2012-01-2300:00:00

ubuntu.com

CVSS2

7.4

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:S/C:C/I:C/A:C

EPSS

0.001

Percentile

37.8%

JSON

Heap-based buffer overflow in the process_tx_desc function in the e1000
emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions,
allows guest OS users to cause a denial of service (QEMU crash) and
possibly execute arbitrary code via crafted legacy mode packets.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchqemu-kvm< 0.12.3+noroms-0ubuntu9.17UNKNOWN
ubuntu10.10noarchqemu-kvm< 0.12.5+noroms-0ubuntu7.11UNKNOWN
ubuntu11.04noarchqemu-kvm< 0.14.0+noroms-0ubuntu4.5UNKNOWN
ubuntu11.10noarchqemu-kvm< 0.14.1+noroms-0ubuntu6.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	qemu-kvm	< 0.12.3+noroms-0ubuntu9.17	UNKNOWN
ubuntu	10.10	noarch	qemu-kvm	< 0.12.5+noroms-0ubuntu7.11	UNKNOWN
ubuntu	11.04	noarch	qemu-kvm	< 0.14.0+noroms-0ubuntu4.5	UNKNOWN
ubuntu	11.10	noarch	qemu-kvm	< 0.14.1+noroms-0ubuntu6.2	UNKNOWN