CVE-2012-0029 Memory corruption in n/a

High 7.4 Published 27 Jan 2012 Updated 6 Aug 2024

Guest OS users can trigger a heap buffer overflow in QEMU's e1000 emulation to crash the host or execute arbitrary code.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2012-0029?

CVE-2012-0029 is a high-severity memory corruption vulnerability in n/a, published on 27 Jan 2012. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.

Weakness: CWE-119

Which versions are affected by CVE-2012-0029?

It affects 1 product.

Linux distribution packages (28)

`xen` Red Hat:enterprise_linux:5::client	All versions	`0:3.0.3-135.el5_8.2`
`xen-debuginfo` Red Hat:enterprise_linux:5::client	All versions	`0:3.0.3-135.el5_8.2`
`xen-libs` Red Hat:enterprise_linux:5::client	All versions	`0:3.0.3-135.el5_8.2`
`xen` Red Hat:enterprise_linux:5::server	All versions	`0:3.0.3-135.el5_8.2`
`xen-debuginfo` Red Hat:enterprise_linux:5::server	All versions	`0:3.0.3-135.el5_8.2`
`xen-libs` Red Hat:enterprise_linux:5::server	All versions	`0:3.0.3-135.el5_8.2`
`qemu-img` Red Hat:enterprise_linux:6::client	All versions	`2:0.12.1.2-2.209.el6_2.4`
`qemu-kvm` Red Hat:enterprise_linux:6::client	All versions	`2:0.12.1.2-2.209.el6_2.4`
`qemu-kvm-debuginfo` Red Hat:enterprise_linux:6::client	All versions	`2:0.12.1.2-2.209.el6_2.4`
`qemu-kvm-tools` Red Hat:enterprise_linux:6::client	All versions	`2:0.12.1.2-2.209.el6_2.4`
`qemu-img` Red Hat:enterprise_linux:6::computenode	All versions	`2:0.12.1.2-2.209.el6_2.4`
`qemu-kvm` Red Hat:enterprise_linux:6::computenode	All versions	`2:0.12.1.2-2.209.el6_2.4`
`qemu-kvm-debuginfo` Red Hat:enterprise_linux:6::computenode	All versions	`2:0.12.1.2-2.209.el6_2.4`
`qemu-kvm-tools` Red Hat:enterprise_linux:6::computenode	All versions	`2:0.12.1.2-2.209.el6_2.4`
`qemu-img` Red Hat:enterprise_linux:6::server	All versions	`2:0.12.1.2-2.209.el6_2.4`
`qemu-kvm` Red Hat:enterprise_linux:6::server	All versions	`2:0.12.1.2-2.209.el6_2.4`
`qemu-kvm-debuginfo` Red Hat:enterprise_linux:6::server	All versions	`2:0.12.1.2-2.209.el6_2.4`
`qemu-kvm-tools` Red Hat:enterprise_linux:6::server	All versions	`2:0.12.1.2-2.209.el6_2.4`
`qemu-img` Red Hat:enterprise_linux:6::workstation	All versions	`2:0.12.1.2-2.209.el6_2.4`
`qemu-kvm` Red Hat:enterprise_linux:6::workstation	All versions	`2:0.12.1.2-2.209.el6_2.4`
`qemu-kvm-debuginfo` Red Hat:enterprise_linux:6::workstation	All versions	`2:0.12.1.2-2.209.el6_2.4`
`qemu-kvm-tools` Red Hat:enterprise_linux:6::workstation	All versions	`2:0.12.1.2-2.209.el6_2.4`
`xen` Red Hat:rhel_virtualization:5::client	All versions	`0:3.0.3-135.el5_8.2`
`xen-debuginfo` Red Hat:rhel_virtualization:5::client	All versions	`0:3.0.3-135.el5_8.2`
`xen-devel` Red Hat:rhel_virtualization:5::client	All versions	`0:3.0.3-135.el5_8.2`
`xen` Red Hat:rhel_virtualization:5::server	All versions	`0:3.0.3-135.el5_8.2`
`xen-debuginfo` Red Hat:rhel_virtualization:5::server	All versions	`0:3.0.3-135.el5_8.2`
`xen-devel` Red Hat:rhel_virtualization:5::server	All versions	`0:3.0.3-135.el5_8.2`

Products include Kvm Group Qemu-Kvm.

How do I fix CVE-2012-0029?

Apply the vendor's patch.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2012-0029 being exploited?

There is no known exploitation of CVE-2012-0029 in the wild and no public exploit code.

CVE-2011-2512 Integer overflow in n/a Medium 5.8

Sources

Also known as DEBIAN-CVE-2012-0029, DSA-2396-1, DSA-2404-1, GHSA-8rxf-mc82-x3wv, RHSA-2012:0050, RHSA-2012:0370.