Every CVE Search/ Get API key

CVE-2012-0029

Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in...

7.4 HighFix available

Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.

Exploit likelihood

0.90%Down 1.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.4

Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.

Record
CVE-2012-0029
CVSS 2.0
7.4 HighAV:A/AC:M/Au:S/C:C/I:C/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.

Record
CVE-2012-0029
Updated
2026-11-02
EUVDEUVD-2012-0069 No score

Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.

Record
EUVD-2012-0069
Updated
2026-11-03
GitHub AdvisoriesGHSA-8rxf-mc82-x3wv No score

Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in...

Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.

Record
GHSA-8rxf-mc82-x3wv
Weakness
CWE-119
Updated
2026-11-02
OSV No score

Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.

Record
CVE-2012-0029
Updated
2026-11-02
OSVDEBIAN-CVE-2012-0029 No score

Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.

Record
DEBIAN-CVE-2012-0029
Updated
2026-11-02
OSVopenSUSE-SU-2024:10196-1 No score

xen-4.7.0_12-1.3 on GA media

These are all security issues fixed in the xen-4.7.0_12-1.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10196-1
Updated
2026-11-02
OSVSUSE-SU-2015:0929-1 No score

Security update for kvm

The kvm qemu vt100 emulation was affected by a problem where specific vt100 sequences could have been used by guest users to affect the host. (CVE-2012-3515 aka XSA-17).

Also a temp file race was fixed. (CVE-2012-2652)

Security Issue reference:

* CVE-2012-3515
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3515>
* CVE-2012-2652
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2652>
Record
SUSE-SU-2015:0929-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
xen
Debian:12
 before 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1
4.1.3~rc1+hg-20120614.a9c0a89c08f2-1
xen
Debian:13
 before 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1
4.1.3~rc1+hg-20120614.a9c0a89c08f2-1
xen
Debian:14
 before 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1
4.1.3~rc1+hg-20120614.a9c0a89c08f2-1
qemu-kvm
Debian:6.0
 before 0.12.5+dfsg-5+squeeze8, plus listed versions
0.12.5+dfsg-50.12.5+dfsg-5+squeeze10.12.5+dfsg-5+squeeze20.12.5+dfsg-5+squeeze30.12.5+dfsg-5+squeeze4
Show 4 moreShow less
0.12.5+dfsg-5+squeeze4~bpo50+10.12.5+dfsg-5+squeeze50.12.5+dfsg-5+squeeze60.12.5+dfsg-5+squeeze7
0.12.5+dfsg-5+squeeze8
xen-qemu-dm-4.0
Debian:6.0
 before 4.0.1-2+squeeze1, plus listed versions
4.0.1-2
4.0.1-2+squeeze1
qemu-img
Red Hat:enterprise_linux:6::client
 before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
qemu-kvm
Red Hat:enterprise_linux:6::client
 before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
qemu-kvm-debuginfo
Red Hat:enterprise_linux:6::client
 before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
qemu-kvm-tools
Red Hat:enterprise_linux:6::client
 before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
qemu-img
Red Hat:enterprise_linux:6::computenode
 before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
Show 38 moreShow less
Affected packages
PackageAffectedFixed
qemu-kvm
Red Hat:enterprise_linux:6::computenode
 before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
qemu-kvm-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
qemu-kvm-tools
Red Hat:enterprise_linux:6::computenode
 before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
qemu-img
Red Hat:enterprise_linux:6::server
 before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
qemu-kvm
Red Hat:enterprise_linux:6::server
 before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
qemu-kvm-debuginfo
Red Hat:enterprise_linux:6::server
 before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
qemu-kvm-tools
Red Hat:enterprise_linux:6::server
 before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
qemu-img
Red Hat:enterprise_linux:6::workstation
 before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
qemu-kvm
Red Hat:enterprise_linux:6::workstation
 before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
qemu-kvm-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
qemu-kvm-tools
Red Hat:enterprise_linux:6::workstation
 before 2:0.12.1.2-2.209.el6_2.4
2:0.12.1.2-2.209.el6_2.4
kmod-kvm
Red Hat:rhel_virtualization:5::client
 before 0:83-239.el5_7.1
0:83-239.el5_7.1
kmod-kvm-debug
Red Hat:rhel_virtualization:5::client
 before 0:83-239.el5_7.1
0:83-239.el5_7.1
kvm
Red Hat:rhel_virtualization:5::client
 before 0:83-239.el5_7.1
0:83-239.el5_7.1
kvm-debuginfo
Red Hat:rhel_virtualization:5::client
 before 0:83-239.el5_7.1
0:83-239.el5_7.1
kvm-qemu-img
Red Hat:rhel_virtualization:5::client
 before 0:83-239.el5_7.1
0:83-239.el5_7.1
kvm-tools
Red Hat:rhel_virtualization:5::client
 before 0:83-239.el5_7.1
0:83-239.el5_7.1
kmod-kvm
Red Hat:rhel_virtualization:5::server
 before 0:83-239.el5_7.1
0:83-239.el5_7.1
kmod-kvm-debug
Red Hat:rhel_virtualization:5::server
 before 0:83-239.el5_7.1
0:83-239.el5_7.1
kvm
Red Hat:rhel_virtualization:5::server
 before 0:83-239.el5_7.1
0:83-239.el5_7.1
kvm-debuginfo
Red Hat:rhel_virtualization:5::server
 before 0:83-239.el5_7.1
0:83-239.el5_7.1
kvm-qemu-img
Red Hat:rhel_virtualization:5::server
 before 0:83-239.el5_7.1
0:83-239.el5_7.1
kvm-tools
Red Hat:rhel_virtualization:5::server
 before 0:83-239.el5_7.1
0:83-239.el5_7.1
rhev-hypervisor6
Red Hat:enterprise_linux:6::hypervisor
 before 0:6.2-20120209.0.el6_2
0:6.2-20120209.0.el6_2
rhev-hypervisor6-tools
Red Hat:enterprise_linux:6::hypervisor
 before 0:6.2-20120209.0.el6_2
0:6.2-20120209.0.el6_2
xen
Red Hat:enterprise_linux:5::client
 before 0:3.0.3-135.el5_8.2
0:3.0.3-135.el5_8.2
xen-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:3.0.3-135.el5_8.2
0:3.0.3-135.el5_8.2
xen-libs
Red Hat:enterprise_linux:5::client
 before 0:3.0.3-135.el5_8.2
0:3.0.3-135.el5_8.2
xen
Red Hat:rhel_virtualization:5::client
 before 0:3.0.3-135.el5_8.2
0:3.0.3-135.el5_8.2
xen-debuginfo
Red Hat:rhel_virtualization:5::client
 before 0:3.0.3-135.el5_8.2
0:3.0.3-135.el5_8.2
xen-devel
Red Hat:rhel_virtualization:5::client
 before 0:3.0.3-135.el5_8.2
0:3.0.3-135.el5_8.2
xen
Red Hat:enterprise_linux:5::server
 before 0:3.0.3-135.el5_8.2
0:3.0.3-135.el5_8.2
xen-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:3.0.3-135.el5_8.2
0:3.0.3-135.el5_8.2
xen-libs
Red Hat:enterprise_linux:5::server
 before 0:3.0.3-135.el5_8.2
0:3.0.3-135.el5_8.2
xen
Red Hat:rhel_virtualization:5::server
 before 0:3.0.3-135.el5_8.2
0:3.0.3-135.el5_8.2
xen-debuginfo
Red Hat:rhel_virtualization:5::server
 before 0:3.0.3-135.el5_8.2
0:3.0.3-135.el5_8.2
xen-devel
Red Hat:rhel_virtualization:5::server
 before 0:3.0.3-135.el5_8.2
0:3.0.3-135.el5_8.2
xen
openSUSE:Tumbleweed
 before 4.7.0_12-1.3
4.7.0_12-1.3

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-0029 is a high vulnerability (CVSS 7.4) in Kvm Group Qemu-kvm, published January 27, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.90%, the 59th percentile. Fixed in xen 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 16 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open