SB2013021302 - Buffer overflow in QEMU

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2013021302

SB2013021302 - Buffer overflow in QEMU

Published: February 13, 2013 Updated: July 28, 2020

Security Bulletin ID SB2013021302
Severity
High
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Buffer overflow (CVE-ID: CVE-2012-6075)

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disabled, allows remote attackers to cause a denial of service (guest OS crash) and possibly execute arbitrary guest code via a large packet.


Remediation

Install update from vendor's website.

References