Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-kvmUpgrade kvmUpgrade kmod-kvm-debugUpgrade kmod-kvmUpgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade kvm-toolsUpgrade kvm-qemu-img | Dec 1, 2016 | Jan 27, 2012 |
| Debian | — | Upgrade xen | Jul 30, 2024 | Jan 27, 2012 |
| Gentoo Linux | — | Upgrade app-emulation/qemu-kvm. | Oct 30, 2017 | Jan 27, 2012 |
| Oracle_linux | — | Upgrade qemu-kvm-toolsUpgrade kvm-qemu-imgUpgrade kvm-toolsUpgrade xen-develUpgrade kmod-kvm-debugUpgrade xenUpgrade kmod-kvmUpgrade kvmUpgrade xen-libsUpgrade qemu-imgUpgrade qemu-kvm | Oct 16, 2024 | Jan 27, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 23, 2012 |
| Suse | — | Upgrade xen-kmp-paeUpgrade xen-libs-32bitUpgrade xen-doc-pdfUpgrade xen-kmp-defaultUpgrade xenUpgrade xen-doc-htmlUpgrade xen-libsUpgrade xen-toolsUpgrade xen-tools-domUUpgrade xen-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade qemu-kvm-extrasUpgrade qemu-kvmUpgrade qemu-kvm-extras-static | Nov 8, 2024 | Jan 27, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub