NVD

Id
47029  
Name
CVE-2012-6075  
Description
Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disabled, allows remote attackers to cause a denial of service (guest OS crash) and possibly execute arbitrary guest code via a large packet.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2013-02-12  
Modified Date
2014-04-19  
Seq
2012-6075  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
235504 47029 CVE-2012-6075 http://git.qemu.org/?p=qemu.git;a=commitdiff;h=b0d9ffcd0251161c7c92f94804dcf599dfa3edeb  View
235505 47029 CVE-2012-6075 FEDORA-2013-0971  View
235506 47029 CVE-2012-6075 FEDORA-2013-0965  View
235507 47029 CVE-2012-6075 FEDORA-2013-0934  View
235508 47029 CVE-2012-6075 [Qemu-devel] 20121205 [PATCH] e1000: Discard oversized packets based on SBP|LPE  View
235509 47029 CVE-2012-6075 SUSE-SU-2014:0446  View
235510 47029 CVE-2012-6075 openSUSE-SU-2013:0636  View
235511 47029 CVE-2012-6075 openSUSE-SU-2013:0637  View
235512 47029 CVE-2012-6075 RHSA-2013:0599  View
235513 47029 CVE-2012-6075 RHSA-2013:0608  View
235514 47029 CVE-2012-6075 RHSA-2013:0609  View
235515 47029 CVE-2012-6075 RHSA-2013:0610  View
235516 47029 CVE-2012-6075 RHSA-2013:0639  View
235517 47029 CVE-2012-6075 GLSA-201309-24  View
235518 47029 CVE-2012-6075 DSA-2607  View
235519 47029 CVE-2012-6075 DSA-2608  View
235520 47029 CVE-2012-6075 DSA-2619  View
235521 47029 CVE-2012-6075 [oss-security] 20121229 Re: CVE request: qemu e1000 emulated device gues-side buffer overflow  View
235522 47029 CVE-2012-6075 57420  View
235523 47029 CVE-2012-6075 USN-1692-1  View
235524 47029 CVE-2012-6075 https://bugzilla.redhat.com/show_bug.cgi?id=889301  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19970 JVNDB-2013-001545 Qemu の e1000 デバイスドライバにおけるバッファオーバーフローの脆弱性 Qemu の e1000 デバイスドライバ (hw/e1000.c) の e1000_receive 関数には、SBP および LPE フラグが無効の場合、バッファオーバーフローの脆弱性が存在します。 CVE-2012-6075 59313 CVE-2012-6075 47029 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001545.html 2013-02-13 2013-02-15 View