CVE-2012-6075

Publication date 31 December 2012

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disabled, allows remote attackers to cause a denial of service (guest OS crash) and possibly execute arbitrary guest code via a large packet.

Read the notes from the security team

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
kvm 13.10 saucy Not in release
13.04 raring Not in release
12.10 quantal Not in release
12.04 LTS precise Not in release
11.10 oneiric Not in release
10.04 LTS lucid Not in release
8.04 LTS hardy Ignored end of life
qemu 13.10 saucy
Fixed 1.3.0+dfsg-1~exp3ubuntu3
13.04 raring
Fixed 1.3.0+dfsg-1~exp3ubuntu3
12.10 quantal Not in release
12.04 LTS precise Not in release
11.10 oneiric Not in release
10.04 LTS lucid Not in release
8.04 LTS hardy Ignored end of life
qemu-kvm 13.10 saucy Not in release
13.04 raring Not in release
12.10 quantal
Fixed 1.2.0+noroms-0ubuntu2.12.10.2
12.04 LTS precise
Fixed 1.0+noroms-0ubuntu14.7
11.10 oneiric
Fixed 0.14.1+noroms-0ubuntu6.6
10.04 LTS lucid
Fixed 0.12.3+noroms-0ubuntu9.21
8.04 LTS hardy Not in release
xen 13.10 saucy
Fixed 4.2.0-1ubuntu6
13.04 raring
Fixed 4.2.0-1ubuntu6
12.10 quantal
Fixed 4.1.3-3ubuntu1.2
12.04 LTS precise
Fixed 4.1.2-2ubuntu2.5
11.10 oneiric
Fixed 4.1.1-2ubuntu4.5
10.04 LTS lucid Not in release
8.04 LTS hardy Not in release
xen-3.1 13.10 saucy Not in release
13.04 raring Not in release
12.10 quantal Not in release
12.04 LTS precise Not in release
11.10 oneiric Not in release
10.04 LTS lucid Not in release
8.04 LTS hardy Ignored end of life
xen-3.2 13.10 saucy Not in release
13.04 raring Not in release
12.10 quantal Not in release
12.04 LTS precise Not in release
11.10 oneiric Not in release
10.04 LTS lucid Not in release
8.04 LTS hardy Ignored end of life
xen-3.3 13.10 saucy Not in release
13.04 raring Not in release
12.10 quantal Not in release
12.04 LTS precise Not in release
11.10 oneiric Not in release
10.04 LTS lucid Ignored end of life
8.04 LTS hardy Not in release

Notes

mdeslaur

hypervisor packages are in universe. For issues in the hypervisor, add appropriate tags to each section, ex: Tags_xen: universe-binary

kees

qemu and kvm are only included if the Xen issue is in full-virt mode.

seth-arnold

“there will be no more qemu-kvm releases.” -- Michael Tokarev qemu patches should apply to xen’s embedded copies

mdeslaur

raring is replacing qemu-kvm with qemu (in progress)

References

Related Ubuntu Security Notices (USN)

Other references