Vulnerability-Lookup

CVE-2012-0029 (GCVE-0-2012-0029)

Vulnerability from cvelistv5 – Published: 2012-01-27 15:00 – Updated: 2024-08-06 18:09

Summary

Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

15 references

URL	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://secunia.com/advisories/47741	third-party-advisoryx_refsource_SECUNIA
http://git.qemu.org/?p=qemu.git%3Ba=log%3Bh=refs/…	x_refsource_CONFIRM
http://secunia.com/advisories/47992	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/48318	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/47740	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2012-00…	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2012-0…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-1339-1	vendor-advisoryx_refsource_UBUNTU
http://www.securityfocus.com/bid/51642	vdb-entryx_refsource_BID
http://secunia.com/advisories/50913	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2012-0370.html	vendor-advisoryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=772075	x_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA

Date Public

2012-01-05 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T18:09:17.355Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "qemu-processtxdesc-bo(72656)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72656"
          },
          {
            "name": "47741",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/47741"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=log%3Bh=refs/heads/stable-1.0"
          },
          {
            "name": "47992",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/47992"
          },
          {
            "name": "48318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48318"
          },
          {
            "name": "47740",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/47740"
          },
          {
            "name": "RHSA-2012:0050",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2012-0050.html"
          },
          {
            "name": "openSUSE-SU-2012:0207",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2012-02/msg00009.html"
          },
          {
            "name": "USN-1339-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1339-1"
          },
          {
            "name": "51642",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/51642"
          },
          {
            "name": "50913",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50913"
          },
          {
            "name": "SUSE-SU-2012:1320",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html"
          },
          {
            "name": "RHSA-2012:0370",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0370.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=772075"
          },
          {
            "name": "FEDORA-2012-8604",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-01-05T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-28T12:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "qemu-processtxdesc-bo(72656)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72656"
        },
        {
          "name": "47741",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/47741"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=log%3Bh=refs/heads/stable-1.0"
        },
        {
          "name": "47992",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/47992"
        },
        {
          "name": "48318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48318"
        },
        {
          "name": "47740",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/47740"
        },
        {
          "name": "RHSA-2012:0050",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2012-0050.html"
        },
        {
          "name": "openSUSE-SU-2012:0207",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2012-02/msg00009.html"
        },
        {
          "name": "USN-1339-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1339-1"
        },
        {
          "name": "51642",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/51642"
        },
        {
          "name": "50913",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50913"
        },
        {
          "name": "SUSE-SU-2012:1320",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html"
        },
        {
          "name": "RHSA-2012:0370",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-0370.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=772075"
        },
        {
          "name": "FEDORA-2012-8604",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2012-0029",
    "datePublished": "2012-01-27T15:00:00.000Z",
    "dateReserved": "2011-12-07T00:00:00.000Z",
    "dateUpdated": "2024-08-06T18:09:17.355Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2012-0029",
      "date": "2026-09-15",
      "epss": "0.00911",
      "percentile": "0.58116"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:kvm_group:qemu-kvm:0.12:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A7E67322-2B2B-450B-B16F-67673557F8E1\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.\"}, {\"lang\": \"es\", \"value\": \"Una vulnerabilidad de desbordamiento de buffer basado en memoria din\\u00e1mica (heap)en la funci\\u00f3n process_tx_desc en la emulaci\\u00f3n de un e1000 (hw/e1000.c) en qemu-kvm v0.12, y posiblemente otras versiones, permite causar una denegaci\\u00f3n de servicio (por ca\\u00edda de QEMU) y posiblemente ejecutar c\\u00f3digo de su elecci\\u00f3n a los usuarios del sistema operativo emulado a trav\\u00e9s de paquetes de modo \u0027legacy\u0027 especificamente modificados.\"}]",
      "id": "CVE-2012-0029",
      "lastModified": "2024-11-21T01:34:14.673",
      "metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:A/AC:M/Au:S/C:C/I:C/A:C\", \"baseScore\": 7.4, \"accessVector\": \"ADJACENT_NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"SINGLE\", \"confidentialityImpact\": \"COMPLETE\", \"integrityImpact\": \"COMPLETE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 4.4, \"impactScore\": 10.0, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2012-01-27T15:55:04.750",
      "references": "[{\"url\": \"http://git.qemu.org/?p=qemu.git%3Ba=log%3Bh=refs/heads/stable-1.0\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://lists.opensuse.org/opensuse-updates/2012-02/msg00009.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2012-0370.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://secunia.com/advisories/47740\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/47741\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/47992\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://secunia.com/advisories/48318\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://secunia.com/advisories/50913\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2012-0050.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.securityfocus.com/bid/51642\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.ubuntu.com/usn/USN-1339-1\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=772075\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/72656\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://git.qemu.org/?p=qemu.git%3Ba=log%3Bh=refs/heads/stable-1.0\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-updates/2012-02/msg00009.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2012-0370.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/47740\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/47741\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/47992\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/48318\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/50913\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2012-0050.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/51642\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.ubuntu.com/usn/USN-1339-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=772075\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/72656\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "secalert@redhat.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-119\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2012-0029\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2012-01-27T15:55:04.750\",\"lastModified\":\"2026-04-29T01:13:23.040\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad de desbordamiento de buffer basado en memoria din\u00e1mica (heap)en la funci\u00f3n process_tx_desc en la emulaci\u00f3n de un e1000 (hw/e1000.c) en qemu-kvm v0.12, y posiblemente otras versiones, permite causar una denegaci\u00f3n de servicio (por ca\u00edda de QEMU) y posiblemente ejecutar c\u00f3digo de su elecci\u00f3n a los usuarios del sistema operativo emulado a trav\u00e9s de paquetes de modo \u0027legacy\u0027 especificamente modificados.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:A/AC:M/Au:S/C:C/I:C/A:C\",\"baseScore\":7.4,\"accessVector\":\"ADJACENT_NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":4.4,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-119\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:kvm_group:qemu-kvm:0.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7E67322-2B2B-450B-B16F-67673557F8E1\"}]}]}],\"references\":[{\"url\":\"http://git.qemu.org/?p=qemu.git%3Ba=log%3Bh=refs/heads/stable-1.0\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2012-02/msg00009.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-0370.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/47740\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/47741\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/47992\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/48318\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/50913\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2012-0050.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securityfocus.com/bid/51642\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.ubuntu.com/usn/USN-1339-1\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=772075\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/72656\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://git.qemu.org/?p=qemu.git%3Ba=log%3Bh=refs/heads/stable-1.0\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2012-02/msg00009.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-0370.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/47740\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/47741\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/47992\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/48318\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/50913\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2012-0050.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/51642\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/USN-1339-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=772075\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/72656\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2026-06-27T14:19:24+00:00",
      "cve": "CVE-2012-0029",
      "id": "CVE-2012-0029",
      "initial_release_date": "2012-01-23T00:00:00+00:00",
      "product_status:fixed": "66",
      "product_status:known_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "qemu: e1000: process_tx_desc legacy mode packets heap overflow",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-0029.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-07-31T01:55:57Z",
      "cve": "CVE-2012-0029",
      "id": "CVE-2012-0029",
      "initial_release_date": "2023-02-15T05:49:27Z",
      "product_status:recommended": "196",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2012-0029",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2012-0029.json",
      "version": "10"
    }
  }
}

CERTA-2012-AVI-061

Vulnerability from certfr_avis - Published: - Updated:

Une vulnérabilité a été corrigée dans Xen. Elle permet à une machine invité malveillante de causer un déni de service du système hôte ou d'élever ses privilèges.

Description

Une vulnérabilité a été identifiée dans Xen. Elle impacte les systèmes hôtes hébergeant des systèmes invités HVM configurés avec une carte réseau émulée de type e1000. Cette vulnérabilité, de type corruption de mémoire, permet à un système invité malveillant de causer un déni de service du système hôte ou d'élever ses privilèges.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Xen 4.x.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

CERTA-2012-AVI-061

Vulnerability from certfr_avis - Published: - Updated:

Une vulnérabilité a été corrigée dans Xen. Elle permet à une machine invité malveillante de causer un déni de service du système hôte ou d'élever ses privilèges.

Description

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Xen 4.x.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

FKIE_CVE-2012-0029

Vulnerability from fkie_nvd - Published: 2012-01-27 15:55 - Updated: 2026-06-16 23:36

Severity

Summary

References

URL	Tags
secalert@redhat.com	http://git.qemu.org/?p=qemu.git%3Ba=log%3Bh=refs/heads/stable-1.0
secalert@redhat.com	http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html
secalert@redhat.com	http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html
secalert@redhat.com	http://lists.opensuse.org/opensuse-updates/2012-02/msg00009.html
secalert@redhat.com	http://rhn.redhat.com/errata/RHSA-2012-0370.html
secalert@redhat.com	http://secunia.com/advisories/47740	Vendor Advisory
secalert@redhat.com	http://secunia.com/advisories/47741	Vendor Advisory
secalert@redhat.com	http://secunia.com/advisories/47992
secalert@redhat.com	http://secunia.com/advisories/48318
secalert@redhat.com	http://secunia.com/advisories/50913
secalert@redhat.com	http://www.redhat.com/support/errata/RHSA-2012-0050.html
secalert@redhat.com	http://www.securityfocus.com/bid/51642
secalert@redhat.com	http://www.ubuntu.com/usn/USN-1339-1
secalert@redhat.com	https://bugzilla.redhat.com/show_bug.cgi?id=772075
secalert@redhat.com	https://exchange.xforce.ibmcloud.com/vulnerabilities/72656
af854a3a-2127-422b-91ae-364da2661108	http://git.qemu.org/?p=qemu.git%3Ba=log%3Bh=refs/heads/stable-1.0
af854a3a-2127-422b-91ae-364da2661108	http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-updates/2012-02/msg00009.html
af854a3a-2127-422b-91ae-364da2661108	http://rhn.redhat.com/errata/RHSA-2012-0370.html
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/47740	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/47741	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/47992
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/48318
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/50913
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2012-0050.html
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/51642
af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntu.com/usn/USN-1339-1
af854a3a-2127-422b-91ae-364da2661108	https://bugzilla.redhat.com/show_bug.cgi?id=772075
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/72656

Impacted products

	Vendor	Product	Version
	kvm_group	qemu-kvm	0.12

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "secalert@redhat.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:kvm_group:qemu-kvm:0.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "A7E67322-2B2B-450B-B16F-67673557F8E1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de desbordamiento de buffer basado en memoria din\u00e1mica (heap)en la funci\u00f3n process_tx_desc en la emulaci\u00f3n de un e1000 (hw/e1000.c) en qemu-kvm v0.12, y posiblemente otras versiones, permite causar una denegaci\u00f3n de servicio (por ca\u00edda de QEMU) y posiblemente ejecutar c\u00f3digo de su elecci\u00f3n a los usuarios del sistema operativo emulado a trav\u00e9s de paquetes de modo \u0027legacy\u0027 especificamente modificados."
    }
  ],
  "id": "CVE-2012-0029",
  "lastModified": "2026-06-16T23:36:31.620",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "ADJACENT_NETWORK",
          "authentication": "SINGLE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.4,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:A/AC:M/Au:S/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 4.4,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2012-01-27T15:55:04.750",
  "references": [
    {
      "source": "secalert@redhat.com",
      "url": "http://git.qemu.org/?p=qemu.git%3Ba=log%3Bh=refs/heads/stable-1.0"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.opensuse.org/opensuse-updates/2012-02/msg00009.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://rhn.redhat.com/errata/RHSA-2012-0370.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/47740"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/47741"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/47992"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/48318"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/50913"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.redhat.com/support/errata/RHSA-2012-0050.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/bid/51642"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.ubuntu.com/usn/USN-1339-1"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=772075"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72656"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://git.qemu.org/?p=qemu.git%3Ba=log%3Bh=refs/heads/stable-1.0"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-updates/2012-02/msg00009.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2012-0370.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/47740"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/47741"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/47992"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/48318"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/50913"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2012-0050.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/51642"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/USN-1339-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=772075"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72656"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-8RXF-MC82-X3WV

Vulnerability from github – Published: 2022-05-04 00:27 – Updated: 2022-05-04 00:27

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2012-0029"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-119"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2012-01-27T15:55:00Z",
    "severity": "HIGH"
  },
  "details": "Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.",
  "id": "GHSA-8rxf-mc82-x3wv",
  "modified": "2022-05-04T00:27:43Z",
  "published": "2022-05-04T00:27:43Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0029"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2012:0050"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2012:0051"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2012:0109"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2012:0168"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2012:0370"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/security/cve/CVE-2012-0029"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=772075"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72656"
    },
    {
      "type": "WEB",
      "url": "http://git.qemu.org/?p=qemu.git%3Ba=log%3Bh=refs/heads/stable-1.0"
    },
    {
      "type": "WEB",
      "url": "http://git.qemu.org/?p=qemu.git;a=log;h=refs/heads/stable-1.0"
    },
    {
      "type": "WEB",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-updates/2012-02/msg00009.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2012-0370.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/47740"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/47741"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/47992"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/48318"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/50913"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2012-0050.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/51642"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-1339-1"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2012-0029

Vulnerability from gsd - Updated: 2023-12-13 01:20

Details

Aliases

CVE-2012-0029

Aliases

CVE-2012-0029

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2012-0029",
    "description": "Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.",
    "id": "GSD-2012-0029",
    "references": [
      "https://www.suse.com/security/cve/CVE-2012-0029.html",
      "https://www.debian.org/security/2012/dsa-2404",
      "https://www.debian.org/security/2012/dsa-2396",
      "https://access.redhat.com/errata/RHSA-2012:0370",
      "https://access.redhat.com/errata/RHSA-2012:0168",
      "https://access.redhat.com/errata/RHSA-2012:0109",
      "https://access.redhat.com/errata/RHSA-2012:0051",
      "https://access.redhat.com/errata/RHSA-2012:0050",
      "https://linux.oracle.com/cve/CVE-2012-0029.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2012-0029"
      ],
      "details": "Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.",
      "id": "GSD-2012-0029",
      "modified": "2023-12-13T01:20:13.604643Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2012-0029",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html",
            "refsource": "MISC",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html"
          },
          {
            "name": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html",
            "refsource": "MISC",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html"
          },
          {
            "name": "http://secunia.com/advisories/50913",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/50913"
          },
          {
            "name": "http://lists.opensuse.org/opensuse-updates/2012-02/msg00009.html",
            "refsource": "MISC",
            "url": "http://lists.opensuse.org/opensuse-updates/2012-02/msg00009.html"
          },
          {
            "name": "http://secunia.com/advisories/47992",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/47992"
          },
          {
            "name": "http://git.qemu.org/?p=qemu.git%3Ba=log%3Bh=refs/heads/stable-1.0",
            "refsource": "MISC",
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=log%3Bh=refs/heads/stable-1.0"
          },
          {
            "name": "http://rhn.redhat.com/errata/RHSA-2012-0370.html",
            "refsource": "MISC",
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0370.html"
          },
          {
            "name": "http://secunia.com/advisories/47740",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/47740"
          },
          {
            "name": "http://secunia.com/advisories/47741",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/47741"
          },
          {
            "name": "http://secunia.com/advisories/48318",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/48318"
          },
          {
            "name": "http://www.redhat.com/support/errata/RHSA-2012-0050.html",
            "refsource": "MISC",
            "url": "http://www.redhat.com/support/errata/RHSA-2012-0050.html"
          },
          {
            "name": "http://www.securityfocus.com/bid/51642",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/bid/51642"
          },
          {
            "name": "http://www.ubuntu.com/usn/USN-1339-1",
            "refsource": "MISC",
            "url": "http://www.ubuntu.com/usn/USN-1339-1"
          },
          {
            "name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72656",
            "refsource": "MISC",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72656"
          },
          {
            "name": "https://bugzilla.redhat.com/show_bug.cgi?id=772075",
            "refsource": "MISC",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=772075"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:kvm_group:qemu-kvm:0.12:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2012-0029"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-119"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "47740",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/47740"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=772075",
              "refsource": "MISC",
              "tags": [],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=772075"
            },
            {
              "name": "RHSA-2012:0050",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2012-0050.html"
            },
            {
              "name": "47741",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/47741"
            },
            {
              "name": "51642",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/51642"
            },
            {
              "name": "USN-1339-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/USN-1339-1"
            },
            {
              "name": "FEDORA-2012-8604",
              "refsource": "FEDORA",
              "tags": [],
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html"
            },
            {
              "name": "openSUSE-SU-2012:0207",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-updates/2012-02/msg00009.html"
            },
            {
              "name": "47992",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/47992"
            },
            {
              "name": "48318",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/48318"
            },
            {
              "name": "RHSA-2012:0370",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2012-0370.html"
            },
            {
              "name": "SUSE-SU-2012:1320",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html"
            },
            {
              "name": "50913",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/50913"
            },
            {
              "name": "qemu-processtxdesc-bo(72656)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72656"
            },
            {
              "name": "http://git.qemu.org/?p=qemu.git%3Ba=log%3Bh=refs/heads/stable-1.0",
              "refsource": "MISC",
              "tags": [],
              "url": "http://git.qemu.org/?p=qemu.git%3Ba=log%3Bh=refs/heads/stable-1.0"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.4,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:A/AC:M/Au:S/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 4.4,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2023-02-13T00:22Z",
      "publishedDate": "2012-01-27T15:55Z"
    }
  }
}

OPENSUSE-SU-2024:10196-1

Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00

Summary

xen-4.7.0_12-1.3 on GA media

Severity

Moderate

Scope

124 vulnerabilities in this advisory, including CVE-2012-0029.

CVE-2012-0029

Recommended: 28 products

Open the full advisory

RHSA-2012:0050

Vulnerability from csaf_redhat - Published: 2012-01-23 18:51 - Updated: 2026-06-27 14:34

Summary

Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update

Severity

Important

Scope

1 vulnerability in this advisory, including CVE-2012-0029.

CVE-2012-0029

7.4 ()


                
                  AV:A/AC:M/Au:S/C:C/I:C/A:C

Fixed: 20 products

https://access.redhat.com/errata/RHSA-2012:0050

Open the full advisory

RHSA-2012:0051

Vulnerability from csaf_redhat - Published: 2012-01-23 18:53 - Updated: 2026-06-27 14:35

Summary

Red Hat Security Advisory: kvm security update

Severity

Important

Scope

2 vulnerabilities in this advisory, including CVE-2012-0029.

CVE-2012-0029

7.4 ()


                
                  AV:A/AC:M/Au:S/C:C/I:C/A:C

Fixed: 14 products

https://access.redhat.com/errata/RHSA-2012:0051

Open the full advisory

RHSA-2012:0109

Vulnerability from csaf_redhat - Published: 2012-02-15 16:01 - Updated: 2026-06-27 14:35

Summary

Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update

Severity

Important

Scope

4 vulnerabilities in this advisory, including CVE-2012-0029.

CVE-2012-0029

7.4 ()


                
                  AV:A/AC:M/Au:S/C:C/I:C/A:C

Fixed: 3 products

https://access.redhat.com/errata/RHSA-2012:0109

Open the full advisory

RHSA-2012:0168

Vulnerability from csaf_redhat - Published: 2012-02-21 04:52 - Updated: 2012-02-21 05:01

Summary

Red Hat Security Advisory: rhev-hypervisor5 security and bug fix update

Severity

Important

Scope

5 vulnerabilities in this advisory, including CVE-2012-0029.

CVE-2012-0029

7.4 ()


                
                  AV:A/AC:M/Au:S/C:C/I:C/A:C

Fixed: 1 product

https://access.redhat.com/errata/RHSA-2012:0168

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2012-0029 (GCVE-0-2012-0029)

Description

Solution

Description

Solution

Tags

Sightings

Nomenclature

Related by attack behaviour