CVE-2012-6075

Опубликовано: 13 фев. 2013

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disabled, allows remote attackers to cause a denial of service (guest OS crash) and possibly execute arbitrary guest code via a large packet.

Ссылки

http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=b0d9ffcd0251161c7c92f94804dcf599dfa3edeb
http://lists.fedoraproject.org/pipermail/package-announce/2013-January/097541.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-January/097575.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-January/097705.html
Third Party Advisory
http://lists.nongnu.org/archive/html/qemu-devel/2012-12/msg00533.html
Patch
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0599.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0608.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0609.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0610.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0639.html
Third Party Advisory
http://secunia.com/advisories/55082
Third Party Advisory
http://security.gentoo.org/glsa/glsa-201309-24.xml
Third Party Advisory
http://www.debian.org/security/2013/dsa-2607
Third Party Advisory
http://www.debian.org/security/2013/dsa-2608
Third Party Advisory
http://www.debian.org/security/2013/dsa-2619
Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/12/30/1
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/57420
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*

Версия до 1.3.0 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:16:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:17:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:18:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:ltss:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:5.9:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:6.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:5.9:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

Конфигурация 5

Одновременно

cpe:2.3:a:redhat:virtualization:3.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

Конфигурация 6

cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*

Конфигурация 7

Одно из

cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.0597

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-120

Связанные уязвимости

CVE-2012-6075

ubuntu

больше 12 лет назад

CVE-2012-6075

redhat

больше 12 лет назад

CVE-2012-6075

debian

больше 12 лет назад

Buffer overflow in the e1000_receive function in the e1000 device driv ...

GHSA-mw8m-jhfq-5hv9

github

больше 3 лет назад

ELSA-2013-0609

oracle-oval

больше 12 лет назад

ELSA-2013-0609: qemu-kvm security update (IMPORTANT)

EPSS

Процентиль: 90%

0.0597

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-120