CVE-2012-6075
Fixed in a distro release EPSS 5%
Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disabled, allows remote attackers to cause a denial of service (guest OS crash) and possibly execute arbitrary guest code via a large packet.
Products: qemu, fedoraproject fedora, opensuse, suse linux_enterprise_server, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_workstation, redhat virtualization, debian_linux, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | qemu | 1.1.2+dfsg-4 |
| Debian 12 | xen | 4.1.3-8 |
| Debian 13 | qemu | 1.1.2+dfsg-4 |
| Debian 13 | xen | 4.1.3-8 |
| Debian 14 | qemu | 1.1.2+dfsg-4 |
| Debian 14 | xen | 4.1.3-8 |
| Debian 6.0 | qemu | 0.12.5+dfsg-3squeeze3 |
| Debian 6.0 | qemu-kvm | 0.12.5+dfsg-5+squeeze10 |
| Debian 6.0 | xen-qemu-dm-4.0 | 4.0.1-2+squeeze3 |
| Red Hat Enterprise Linux 5 | xen | 0:3.0.3-142.el5_9.2 |
| Red Hat Enterprise Linux 5 | xen-debuginfo | 0:3.0.3-142.el5_9.2 |
| Red Hat Enterprise Linux 5 | xen-libs | 0:3.0.3-142.el5_9.2 |
| Red Hat Enterprise Linux 6 | qemu-guest-agent | 2:0.12.1.2-2.355.el6_4.2 |
| Red Hat Enterprise Linux 6 | qemu-guest-agent-win32 | 2:0.12.1.2-2.355.el6_4.2 |
| Red Hat Enterprise Linux 6 | qemu-img | 2:0.12.1.2-2.355.el6_4.2 |
| Red Hat Enterprise Linux 6 | qemu-img-rhev | 2:0.12.1.2-2.355.el6_4.2 |
| Red Hat Enterprise Linux 6 | qemu-kvm | 2:0.12.1.2-2.355.el6_4.2 |
| Red Hat Enterprise Linux 6 | qemu-kvm-debuginfo | 2:0.12.1.2-2.355.el6_4.2 |
| Red Hat Enterprise Linux 6 | qemu-kvm-rhev | 2:0.12.1.2-2.355.el6_4.2 |
| Red Hat Enterprise Linux 6 | qemu-kvm-rhev-debuginfo | 2:0.12.1.2-2.355.el6_4.2 |
| Red Hat Enterprise Linux 6 | qemu-kvm-rhev-tools | 2:0.12.1.2-2.355.el6_4.2 |
| Red Hat Enterprise Linux 6 | qemu-kvm-tools | 2:0.12.1.2-2.355.el6_4.2 |
| Red Hat Enterprise Linux 6 | rhev-hypervisor6 | 0:6.4-20130306.2.el6_4 |
| Red Hat openstack 2 | qemu-img-rhev | 2:0.12.1.2-2.355.el6_4.2 |
| Red Hat openstack 2 | qemu-kvm-rhev | 2:0.12.1.2-2.355.el6_4.2 |
| Red Hat openstack 2 | qemu-kvm-rhev-debuginfo | 2:0.12.1.2-2.355.el6_4.2 |
| Red Hat openstack 2 | qemu-kvm-rhev-tools | 2:0.12.1.2-2.355.el6_4.2 |
| Red Hat rhel virtualization 5 | kmod-kvm | 0:83-262.el5_9.1 |
| Red Hat rhel virtualization 5 | kmod-kvm-debug | 0:83-262.el5_9.1 |
| Red Hat rhel virtualization 5 | kvm | 0:83-262.el5_9.1 |
| Red Hat rhel virtualization 5 | kvm-debuginfo | 0:83-262.el5_9.1 |
| Red Hat rhel virtualization 5 | kvm-qemu-img | 0:83-262.el5_9.1 |
| Red Hat rhel virtualization 5 | kvm-tools | 0:83-262.el5_9.1 |
| Red Hat rhel virtualization 5 | xen | 0:3.0.3-142.el5_9.2 |
| Red Hat rhel virtualization 5 | xen-debuginfo | 0:3.0.3-142.el5_9.2 |
| Red Hat rhel virtualization 5 | xen-devel | 0:3.0.3-142.el5_9.2 |
| openSUSE Tumbleweed | xen | 4.7.0_12-1.3 |