Vulnerability Details : CVE-2012-0029
Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.
Vulnerability category: OverflowExecute codeDenial of service
Products affected by CVE-2012-0029
- cpe:2.3:a:kvm_group:qemu-kvm:0.12:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2012-0029
0.09%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 36 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2012-0029
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.4
|
HIGH | AV:A/AC:M/Au:S/C:C/I:C/A:C |
4.4
|
10.0
|
NIST |
CWE ids for CVE-2012-0029
-
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.Assigned by: nvd@nist.gov (Primary)
References for CVE-2012-0029
-
http://www.ubuntu.com/usn/USN-1339-1
USN-1339-1: QEMU vulnerability | Ubuntu security notices
-
http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html
[SECURITY] Fedora 15 Update: qemu-0.14.0-9.fc15
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/72656
QEMU process_tx_desc() buffer overflow CVE-2012-0029 Vulnerability Report
-
http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html
[security-announce] SUSE-SU-2012:1320-1: important: Security update for
-
http://www.redhat.com/support/errata/RHSA-2012-0050.html
Support
-
http://rhn.redhat.com/errata/RHSA-2012-0370.html
RHSA-2012:0370 - Security Advisory - Red Hat Customer Portal
-
http://www.securityfocus.com/bid/51642
QEMU KVM CVE-2012-0029 Local Privilege Escalation Vulnerability
-
http://git.qemu.org/?p=qemu.git%3Ba=log%3Bh=refs/heads/stable-1.0
git.qemu.org Git
-
https://bugzilla.redhat.com/show_bug.cgi?id=772075
772075 – (CVE-2012-0029) CVE-2012-0029 qemu: e1000: process_tx_desc legacy mode packets heap overflow
-
http://lists.opensuse.org/opensuse-updates/2012-02/msg00009.html
openSUSE-SU-2012:0207-1: moderate: kvm: fixing initgroups bug and e1000
Jump to