Summary
Ubuntu Update for Linux kernel vulnerabilities USN-1339-1
Solution
Please Install the Updated Packages.
Insight
Nicolae Mogoreanu discovered that QEMU did not properly verify legacy mode packets in the e1000 network driver. A remote attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program.
When using QEMU with libvirt or virtualization management software based on libvirt such as Eucalyptus and OpenStack, QEMU guests are individually isolated by an AppArmor profile by default in Ubuntu.
Affected
qemu-kvm on Ubuntu 11.04 ,
Ubuntu 10.10 ,
Ubuntu 10.04 LTS
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2012-0029 -
CVSS Base Score: 7.4
AV:A/AC:M/Au:S/C:C/I:C/A:C
Related Vulnerabilities