CVE-2012-6075

Name: CVE-2012-6075
Creator: NVD / NIST
Published: 2013-02-13T01:55:03.027+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 4.90%

Last modified Jun 16, 2026

CVE-2012-6075 is a vulnerability of currently unknown severity. Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disabled, allows remote attackers to cause a denial of service (guest OS crash) and possibly execute arbitrary guest code via a large packet.. EPSS estimates a 4.90% chance of exploitation in the next 30 days.

Description

Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disabled, allows remote attackers to cause a denial of service (guest OS crash) and possibly execute arbitrary guest code via a large packet.

Metrics

EPSS Probability

4.90%

91.0th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-120

Affected Software

Vendor	Product	Versions	Update
Qemu	Qemu	< 1.3.0	—
Fedoraproject	Fedora	16	—
Fedoraproject	Fedora	17	—
Fedoraproject	Fedora	18	—
Opensuse	Opensuse	12.1	—
Opensuse	Opensuse	12.2	—
Suse	Linux Enterprise Server	11	Sp1
Redhat	Enterprise Linux Desktop	5.0	—
Redhat	Enterprise Linux Desktop	6.0	—
Redhat	Enterprise Linux Eus	5.9	—
Redhat	Enterprise Linux Eus	6.4	—
Redhat	Enterprise Linux Server	5.0	—
Redhat	Enterprise Linux Server	6.0	—
Redhat	Enterprise Linux Server Aus	5.9	—
Redhat	Enterprise Linux Server Aus	6.4	—
Redhat	Enterprise Linux Workstation	5.0	—
Redhat	Enterprise Linux Workstation	6.0	—
Redhat	Virtualization	3.0	—
Debian	Debian Linux	6.0	—
Canonical	Ubuntu Linux	10.04	—
Canonical	Ubuntu Linux	11.10	—
Canonical	Ubuntu Linux	12.04	—
Canonical	Ubuntu Linux	12.10	—

References

http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=b0d9ffcd0251161c7c92f94804dcf599dfa3edeb
http://lists.fedoraproject.org/pipermail/package-announce/2013-January/097541.htmlThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-January/097575.htmlThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-January/097705.htmlThird Party Advisory
http://lists.nongnu.org/archive/html/qemu-devel/2012-12/msg00533.htmlPatch, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0599.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0608.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0609.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0610.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0639.htmlThird Party Advisory
http://secunia.com/advisories/55082Third Party Advisory
http://security.gentoo.org/glsa/glsa-201309-24.xmlThird Party Advisory
http://www.debian.org/security/2013/dsa-2607Third Party Advisory
http://www.debian.org/security/2013/dsa-2608Third Party Advisory
http://www.debian.org/security/2013/dsa-2619Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/12/30/1Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/57420Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-1692-1Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=889301Issue Tracking, Third Party Advisory
http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=b0d9ffcd0251161c7c92f94804dcf599dfa3edeb
http://lists.fedoraproject.org/pipermail/package-announce/2013-January/097541.htmlThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-January/097575.htmlThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-January/097705.htmlThird Party Advisory
http://lists.nongnu.org/archive/html/qemu-devel/2012-12/msg00533.htmlPatch, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0599.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0608.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0609.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0610.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0639.htmlThird Party Advisory
http://secunia.com/advisories/55082Third Party Advisory
http://security.gentoo.org/glsa/glsa-201309-24.xmlThird Party Advisory
http://www.debian.org/security/2013/dsa-2607Third Party Advisory
http://www.debian.org/security/2013/dsa-2608Third Party Advisory
http://www.debian.org/security/2013/dsa-2619Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/12/30/1Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/57420Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-1692-1Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=889301Issue Tracking, Third Party Advisory

Timeline

Published: Feb 13, 2013
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2012-6075?

How severe is CVE-2012-6075?

Severity scoring for CVE-2012-6075 is pending analysis. The EPSS model estimates a 4.90% probability of exploitation in the next 30 days.

How do I fix CVE-2012-6075?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2012-6075?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST