NetSight
IP …
critical9.3

CVE-2012-6075

Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disa…

Impact

Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disabled, allows remote attackers to cause a denial of service (guest OS crash) and possibly execute arbitrary guest code via a large packet.

Affected products

VendorProductAffected versions
QemuQemu
before 1.3.0
FedoraprojectFedora
Versions 16, 17, 18
OpensuseOpensuse
Versions 12.1, 12.2
SuseLinux Enterprise Server
Version 11
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0
RedhatEnterprise Linux Eus
Versions 5.9, 6.4
RedhatEnterprise Linux Server
Versions 5.0, 6.0
RedhatEnterprise Linux Server Aus
Versions 5.9, 6.4
RedhatEnterprise Linux Workstation
Versions 5.0, 6.0
RedhatVirtualization
Version 3.0
DebianDebian Linux
Version 6.0
CanonicalUbuntu Linux
Versions 10.04, 11.10, 12.04, 12.10

Weakness classification

CWE-120

References