Debian DSA-2404-1 : xen-qemu-dm-4.0 - buffer overflow

high Nessus Plugin ID 57827

Language:

Synopsis

The remote Debian host is missing a security-related update.

Description

Nicolae Mogoreanu discovered a heap overflow in the emulated e1000e network interface card of QEMU, which is used in the xen-qemu-dm-4.0 packages. This vulnerability might enable to malicious guest systems to crash the host system or escalate their privileges.

Solution

The old stable distribution (lenny) does not contain the xen-qemu-dm-4.0 package.

For the stable distribution (squeeze), this problem has been fixed in version 4.0.1-2+squeeze1.

Plugin Details

Severity: High

ID: 57827

File Name: debian_DSA-2404.nasl

Version: 1.9

Type: local

Agent: unix

Family: Debian Local Security Checks

Published: 2/6/2012

Updated: 1/11/2021

Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 7.4

Temporal Score: 5.5

Vector: CVSS2#AV:A/AC:M/Au:S/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:debian:debian_linux:xen-qemu-dm-4.0, cpe:/o:debian:debian_linux:6.0

Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l

Exploit Ease: No known exploits are available

Patch Publication Date: 2/5/2012

Reference Information

CVE: CVE-2012-0029

BID: 51642

DSA: 2404

Detections

Analytics