Every CVESearch/Get API key

CVE-2012-0029

Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in...

7.4 HighFix available

CVE-2012-0029 is a high vulnerability (CVSS 7.4) in Kvm Group Qemu-kvm, published January 27, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.90%, the 60th percentile. Fixed in xen 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1.

What does this mean?
Severity
7.4 HighCVSS 2.0, NVD
Exploit chance
0.90%EPSS, 60th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
4.1.3~rc1+hg-20120614.a9c0a89c08f2-1xen +47 more

Description

Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.

Exploit likelihood

0.90%Down 1.3 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
xen
Debian:12
before 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1
4.1.3~rc1+hg-20120614.a9c0a89c08f2-1
xen
Debian:13
before 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1
4.1.3~rc1+hg-20120614.a9c0a89c08f2-1
xen
Debian:14
before 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1
4.1.3~rc1+hg-20120614.a9c0a89c08f2-1
qemu-kvm
Debian:6.0
before 0.12.5+dfsg-5+squeeze8, plus listed versions
0.12.5+dfsg-50.12.5+dfsg-5+squeeze10.12.5+dfsg-5+squeeze20.12.5+dfsg-5+squeeze30.12.5+dfsg-5+squeeze4
Show 4 moreShow less
0.12.5+dfsg-5+squeeze4~bpo50+10.12.5+dfsg-5+squeeze50.12.5+dfsg-5+squeeze60.12.5+dfsg-5+squeeze7
0.12.5+dfsg-5+squeeze8
xen-qemu-dm-4.0
Debian:6.0
before 4.0.1-2+squeeze1, plus listed versions
4.0.1-2
4.0.1-2+squeeze1
qemu-img
Red Hat:enterprise_linux:6::client
before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
qemu-kvm
Red Hat:enterprise_linux:6::client
before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
qemu-kvm-debuginfo
Red Hat:enterprise_linux:6::client
before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
qemu-kvm-tools
Red Hat:enterprise_linux:6::client
before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
qemu-img
Red Hat:enterprise_linux:6::computenode
before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
Show 38 moreShow less
Affected packages
PackageAffectedFixed
qemu-kvm
Red Hat:enterprise_linux:6::computenode
before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
qemu-kvm-debuginfo
Red Hat:enterprise_linux:6::computenode
before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
qemu-kvm-tools
Red Hat:enterprise_linux:6::computenode
before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
qemu-img
Red Hat:enterprise_linux:6::server
before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
qemu-kvm
Red Hat:enterprise_linux:6::server
before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
qemu-kvm-debuginfo
Red Hat:enterprise_linux:6::server
before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
qemu-kvm-tools
Red Hat:enterprise_linux:6::server
before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
qemu-img
Red Hat:enterprise_linux:6::workstation
before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
qemu-kvm
Red Hat:enterprise_linux:6::workstation
before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
qemu-kvm-debuginfo
Red Hat:enterprise_linux:6::workstation
before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
qemu-kvm-tools
Red Hat:enterprise_linux:6::workstation
before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
kmod-kvm
Red Hat:rhel_virtualization:5::client
From an advisory covering 2 CVEs
before 0:83-239.el5_7.1
0:83-239.el5_7.1
kmod-kvm-debug
Red Hat:rhel_virtualization:5::client
From an advisory covering 2 CVEs
before 0:83-239.el5_7.1
0:83-239.el5_7.1
kvm
Red Hat:rhel_virtualization:5::client
From an advisory covering 2 CVEs
before 0:83-239.el5_7.1
0:83-239.el5_7.1
kvm-debuginfo
Red Hat:rhel_virtualization:5::client
From an advisory covering 2 CVEs
before 0:83-239.el5_7.1
0:83-239.el5_7.1
kvm-qemu-img
Red Hat:rhel_virtualization:5::client
From an advisory covering 2 CVEs
before 0:83-239.el5_7.1
0:83-239.el5_7.1
kvm-tools
Red Hat:rhel_virtualization:5::client
From an advisory covering 2 CVEs
before 0:83-239.el5_7.1
0:83-239.el5_7.1
kmod-kvm
Red Hat:rhel_virtualization:5::server
From an advisory covering 2 CVEs
before 0:83-239.el5_7.1
0:83-239.el5_7.1
kmod-kvm-debug
Red Hat:rhel_virtualization:5::server
From an advisory covering 2 CVEs
before 0:83-239.el5_7.1
0:83-239.el5_7.1
kvm
Red Hat:rhel_virtualization:5::server
From an advisory covering 2 CVEs
before 0:83-239.el5_7.1
0:83-239.el5_7.1
kvm-debuginfo
Red Hat:rhel_virtualization:5::server
From an advisory covering 2 CVEs
before 0:83-239.el5_7.1
0:83-239.el5_7.1
kvm-qemu-img
Red Hat:rhel_virtualization:5::server
From an advisory covering 2 CVEs
before 0:83-239.el5_7.1
0:83-239.el5_7.1
kvm-tools
Red Hat:rhel_virtualization:5::server
From an advisory covering 2 CVEs
before 0:83-239.el5_7.1
0:83-239.el5_7.1
rhev-hypervisor6
Red Hat:enterprise_linux:6::hypervisor
From an advisory covering 4 CVEs
before 0:6.2-20120209.0.el6_2
0:6.2-20120209.0.el6_2
rhev-hypervisor6-tools
Red Hat:enterprise_linux:6::hypervisor
From an advisory covering 4 CVEs
before 0:6.2-20120209.0.el6_2
0:6.2-20120209.0.el6_2
xen
Red Hat:enterprise_linux:5::client
before 0:3.0.3-135.el5_8.2
0:3.0.3-135.el5_8.2
xen-debuginfo
Red Hat:enterprise_linux:5::client
before 0:3.0.3-135.el5_8.2
0:3.0.3-135.el5_8.2
xen-libs
Red Hat:enterprise_linux:5::client
before 0:3.0.3-135.el5_8.2
0:3.0.3-135.el5_8.2
xen
Red Hat:rhel_virtualization:5::client
before 0:3.0.3-135.el5_8.2
0:3.0.3-135.el5_8.2
xen-debuginfo
Red Hat:rhel_virtualization:5::client
before 0:3.0.3-135.el5_8.2
0:3.0.3-135.el5_8.2
xen-devel
Red Hat:rhel_virtualization:5::client
before 0:3.0.3-135.el5_8.2
0:3.0.3-135.el5_8.2
xen
Red Hat:enterprise_linux:5::server
before 0:3.0.3-135.el5_8.2
0:3.0.3-135.el5_8.2
xen-debuginfo
Red Hat:enterprise_linux:5::server
before 0:3.0.3-135.el5_8.2
0:3.0.3-135.el5_8.2
xen-libs
Red Hat:enterprise_linux:5::server
before 0:3.0.3-135.el5_8.2
0:3.0.3-135.el5_8.2
xen
Red Hat:rhel_virtualization:5::server
before 0:3.0.3-135.el5_8.2
0:3.0.3-135.el5_8.2
xen-debuginfo
Red Hat:rhel_virtualization:5::server
before 0:3.0.3-135.el5_8.2
0:3.0.3-135.el5_8.2
xen-devel
Red Hat:rhel_virtualization:5::server
before 0:3.0.3-135.el5_8.2
0:3.0.3-135.el5_8.2
xen
openSUSE:Tumbleweed
From an advisory covering 124 CVEs
before 4.7.0_12-1.3
4.7.0_12-1.3

What each source reports

NVD Score used7.4

Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.

Record
CVE-2012-0029
CVSS 2.0
7.4 HighAV:A/AC:M/Au:S/C:C/I:C/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE ListNo score

Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.

Record
CVE-2012-0029
Updated
2026-11-02
EUVDEUVD-2012-0069No score

Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.

Record
EUVD-2012-0069
Updated
2026-11-03
GitHub AdvisoriesGHSA-8rxf-mc82-x3wvNo score

Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in...

Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.

Record
GHSA-8rxf-mc82-x3wv
Weakness
CWE-119
Updated
2026-11-02
OSVNo score

Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.

Record
CVE-2012-0029
Updated
2026-11-02
OSVDEBIAN-CVE-2012-0029No score

Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.

Record
DEBIAN-CVE-2012-0029
Updated
2026-11-02
OSVopenSUSE-SU-2024:10196-1No score

xen-4.7.0_12-1.3 on GA media

These are all security issues fixed in the xen-4.7.0_12-1.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10196-1
Updated
2026-11-02
OSVSUSE-SU-2015:0929-1No score

Security update for kvm

The kvm qemu vt100 emulation was affected by a problem where specific vt100 sequences could have been used by guest users to affect the host. (CVE-2012-3515 aka XSA-17).

Also a temp file race was fixed. (CVE-2012-2652)

Security Issue reference:

* CVE-2012-3515
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3515>
* CVE-2012-2652
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2652>
Record
SUSE-SU-2015:0929-1
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 16 references. The JSON record has them.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open