CVE-2012-0029
Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in...
7.4 HighFix available
CVE-2012-0029 is a high vulnerability (CVSS 7.4) in Kvm Group Qemu-kvm, published January 27, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.90%, the 59th percentile. Fixed in xen 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1.
Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.
Exploit likelihood
0.90%Down 1.3 points since Feb 4, 2022
What each source reports
NVD Score used
Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.
- Record
CVE-2012-0029- CVSS 2.0
- 7.4 High
AV:A/AC:M/Au:S/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.
- Record
CVE-2012-0029- Updated
- 2026-11-02
EUVDEUVD-2012-0069 No score
Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.
- Record
EUVD-2012-0069- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8rxf-mc82-x3wv No score
Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in...
Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.
- Record
GHSA-8rxf-mc82-x3wv- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.
- Record
CVE-2012-0029- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-0029 No score
Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.
- Record
DEBIAN-CVE-2012-0029- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10196-1 No score
xen-4.7.0_12-1.3 on GA media
These are all security issues fixed in the xen-4.7.0_12-1.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10196-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0929-1 No score
Security update for kvm
The kvm qemu vt100 emulation was affected by a problem where specific vt100 sequences could have been used by guest users to affect the host. (CVE-2012-3515 aka XSA-17).
Also a temp file race was fixed. (CVE-2012-2652)
Security Issue reference:
* CVE-2012-3515
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3515>
* CVE-2012-2652
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2652>
- Record
SUSE-SU-2015:0929-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xenDebian:12 |
before 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1 | 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1 |
xenDebian:13 |
before 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1 | 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1 |
xenDebian:14 |
before 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1 | 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1 |
qemu-kvmDebian:6.0 |
before 0.12.5+dfsg-5+squeeze8, plus listed versions 0.12.5+dfsg-50.12.5+dfsg-5+squeeze10.12.5+dfsg-5+squeeze20.12.5+dfsg-5+squeeze30.12.5+dfsg-5+squeeze4 Show 4 moreShow less0.12.5+dfsg-5+squeeze4~bpo50+10.12.5+dfsg-5+squeeze50.12.5+dfsg-5+squeeze60.12.5+dfsg-5+squeeze7 |
0.12.5+dfsg-5+squeeze8 |
xen-qemu-dm-4.0Debian:6.0 |
before 4.0.1-2+squeeze1, plus listed versions 4.0.1-2 |
4.0.1-2+squeeze1 |
qemu-imgRed Hat:enterprise_linux:6::client |
before 2:0.12.1.2-2.209.el6_2.4 | 2:0.12.1.2-2.209.el6_2.4 |
qemu-kvmRed Hat:enterprise_linux:6::client |
before 2:0.12.1.2-2.209.el6_2.4 | 2:0.12.1.2-2.209.el6_2.4 |
qemu-kvm-debuginfoRed Hat:enterprise_linux:6::client |
before 2:0.12.1.2-2.209.el6_2.4 | 2:0.12.1.2-2.209.el6_2.4 |
qemu-kvm-toolsRed Hat:enterprise_linux:6::client |
before 2:0.12.1.2-2.209.el6_2.4 | 2:0.12.1.2-2.209.el6_2.4 |
qemu-imgRed Hat:enterprise_linux:6::computenode |
before 2:0.12.1.2-2.209.el6_2.4 | 2:0.12.1.2-2.209.el6_2.4 |
Show 38 moreShow less
| Package | Affected | Fixed |
|---|---|---|
qemu-kvmRed Hat:enterprise_linux:6::computenode |
before 2:0.12.1.2-2.209.el6_2.4 | 2:0.12.1.2-2.209.el6_2.4 |
qemu-kvm-debuginfoRed Hat:enterprise_linux:6::computenode |
before 2:0.12.1.2-2.209.el6_2.4 | 2:0.12.1.2-2.209.el6_2.4 |
qemu-kvm-toolsRed Hat:enterprise_linux:6::computenode |
before 2:0.12.1.2-2.209.el6_2.4 | 2:0.12.1.2-2.209.el6_2.4 |
qemu-imgRed Hat:enterprise_linux:6::server |
before 2:0.12.1.2-2.209.el6_2.4 | 2:0.12.1.2-2.209.el6_2.4 |
qemu-kvmRed Hat:enterprise_linux:6::server |
before 2:0.12.1.2-2.209.el6_2.4 | 2:0.12.1.2-2.209.el6_2.4 |
qemu-kvm-debuginfoRed Hat:enterprise_linux:6::server |
before 2:0.12.1.2-2.209.el6_2.4 | 2:0.12.1.2-2.209.el6_2.4 |
qemu-kvm-toolsRed Hat:enterprise_linux:6::server |
before 2:0.12.1.2-2.209.el6_2.4 | 2:0.12.1.2-2.209.el6_2.4 |
qemu-imgRed Hat:enterprise_linux:6::workstation |
before 2:0.12.1.2-2.209.el6_2.4 | 2:0.12.1.2-2.209.el6_2.4 |
qemu-kvmRed Hat:enterprise_linux:6::workstation |
before 2:0.12.1.2-2.209.el6_2.4 | 2:0.12.1.2-2.209.el6_2.4 |
qemu-kvm-debuginfoRed Hat:enterprise_linux:6::workstation |
before 2:0.12.1.2-2.209.el6_2.4 | 2:0.12.1.2-2.209.el6_2.4 |
qemu-kvm-toolsRed Hat:enterprise_linux:6::workstation |
before 2:0.12.1.2-2.209.el6_2.4 | 2:0.12.1.2-2.209.el6_2.4 |
kmod-kvmRed Hat:rhel_virtualization:5::client |
before 0:83-239.el5_7.1 | 0:83-239.el5_7.1 |
kmod-kvm-debugRed Hat:rhel_virtualization:5::client |
before 0:83-239.el5_7.1 | 0:83-239.el5_7.1 |
kvmRed Hat:rhel_virtualization:5::client |
before 0:83-239.el5_7.1 | 0:83-239.el5_7.1 |
kvm-debuginfoRed Hat:rhel_virtualization:5::client |
before 0:83-239.el5_7.1 | 0:83-239.el5_7.1 |
kvm-qemu-imgRed Hat:rhel_virtualization:5::client |
before 0:83-239.el5_7.1 | 0:83-239.el5_7.1 |
kvm-toolsRed Hat:rhel_virtualization:5::client |
before 0:83-239.el5_7.1 | 0:83-239.el5_7.1 |
kmod-kvmRed Hat:rhel_virtualization:5::server |
before 0:83-239.el5_7.1 | 0:83-239.el5_7.1 |
kmod-kvm-debugRed Hat:rhel_virtualization:5::server |
before 0:83-239.el5_7.1 | 0:83-239.el5_7.1 |
kvmRed Hat:rhel_virtualization:5::server |
before 0:83-239.el5_7.1 | 0:83-239.el5_7.1 |
kvm-debuginfoRed Hat:rhel_virtualization:5::server |
before 0:83-239.el5_7.1 | 0:83-239.el5_7.1 |
kvm-qemu-imgRed Hat:rhel_virtualization:5::server |
before 0:83-239.el5_7.1 | 0:83-239.el5_7.1 |
kvm-toolsRed Hat:rhel_virtualization:5::server |
before 0:83-239.el5_7.1 | 0:83-239.el5_7.1 |
rhev-hypervisor6Red Hat:enterprise_linux:6::hypervisor |
before 0:6.2-20120209.0.el6_2 | 0:6.2-20120209.0.el6_2 |
rhev-hypervisor6-toolsRed Hat:enterprise_linux:6::hypervisor |
before 0:6.2-20120209.0.el6_2 | 0:6.2-20120209.0.el6_2 |
xenRed Hat:enterprise_linux:5::client |
before 0:3.0.3-135.el5_8.2 | 0:3.0.3-135.el5_8.2 |
xen-debuginfoRed Hat:enterprise_linux:5::client |
before 0:3.0.3-135.el5_8.2 | 0:3.0.3-135.el5_8.2 |
xen-libsRed Hat:enterprise_linux:5::client |
before 0:3.0.3-135.el5_8.2 | 0:3.0.3-135.el5_8.2 |
xenRed Hat:rhel_virtualization:5::client |
before 0:3.0.3-135.el5_8.2 | 0:3.0.3-135.el5_8.2 |
xen-debuginfoRed Hat:rhel_virtualization:5::client |
before 0:3.0.3-135.el5_8.2 | 0:3.0.3-135.el5_8.2 |
xen-develRed Hat:rhel_virtualization:5::client |
before 0:3.0.3-135.el5_8.2 | 0:3.0.3-135.el5_8.2 |
xenRed Hat:enterprise_linux:5::server |
before 0:3.0.3-135.el5_8.2 | 0:3.0.3-135.el5_8.2 |
xen-debuginfoRed Hat:enterprise_linux:5::server |
before 0:3.0.3-135.el5_8.2 | 0:3.0.3-135.el5_8.2 |
xen-libsRed Hat:enterprise_linux:5::server |
before 0:3.0.3-135.el5_8.2 | 0:3.0.3-135.el5_8.2 |
xenRed Hat:rhel_virtualization:5::server |
before 0:3.0.3-135.el5_8.2 | 0:3.0.3-135.el5_8.2 |
xen-debuginfoRed Hat:rhel_virtualization:5::server |
before 0:3.0.3-135.el5_8.2 | 0:3.0.3-135.el5_8.2 |
xen-develRed Hat:rhel_virtualization:5::server |
before 0:3.0.3-135.el5_8.2 | 0:3.0.3-135.el5_8.2 |
xenopenSUSE:Tumbleweed |
before 4.7.0_12-1.3 | 4.7.0_12-1.3 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
exchange.xforce.ibmcloud.com/vulnerabilities/72656
secunia.com/advisories/47741
git.qemu.org?p=qemu.git%3Ba=log%3Bh=refs/heads/stable-1.0
Show 194 moreShow less
redhat.com/support/errata/RHSA-2012-0050.html
lists.opensuse.org/opensuse-updates/2012-02/msg00009.html
ubuntu.com/usn/USN-1339-1
securityfocus.com/bid/51642
rhn.redhat.com/errata/RHSA-2012-0370.html
bugzilla.redhat.com/show_bug.cgi?id=772075
lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html
nvd.nist.gov/vuln/detail/CVE-2012-0029
access.redhat.com/errata/RHSA-2012:0050
github.com/advisories/GHSA-8rxf-mc82-x3wv
security-tracker.debian.org/tracker/CVE-2012-0029
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0050.json
cve.org/CVERecord?id=CVE-2012-0029
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Virtualization/3.0/html/Technical_Notes
suse.com/support/update/announcement/2015/suse-su-20150929-1
bugzilla.suse.com/598271
This page doesn't list everything
Left out here: 16 references. The JSON record has them.