CVE-2007-5729

NameCVE-2007-5729
DescriptionThe NE2000 emulator in QEMU 0.8.2 allows local users to execute arbitrary code by writing Ethernet frames with a size larger than the MTU to the EN0_TCNT register, which triggers a heap-based buffer overflow in the slirp library, aka NE2000 "mtu" heap overflow. NOTE: some sources have used CVE-2007-1321 to refer to this issue as part of "NE2000 network driver and the socket code," but this is the correct identifier for the mtu overflow vulnerability.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SuSE, Mageia, GitHub code/issues, web search, more)
ReferencesDSA-1284-1
NVD severitymedium (attack range: local)
Debian Bugs424070

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
qemu (PTS)wheezy1.1.2+dfsg-6a+deb7u12fixed
wheezy (security)1.1.2+dfsg-6+deb7u23fixed
jessie (security), jessie1:2.1+dfsg-12+deb8u6fixed
stretch1:2.8+dfsg-6fixed
stretch (security)1:2.8+dfsg-6+deb9u2fixed
buster, sid1:2.8+dfsg-7fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
kvmsource(unstable)72+dfsg-1medium
linux-2.6source(unstable)(not affected)
linux-2.6.24source(unstable)(not affected)
qemusource(unstable)0.9.0-2medium424070
qemusourceetch0.8.2-4etch1mediumDSA-1284-1
qemusourcesarge0.6.1+20050407-1sarge1mediumDSA-1284-1

Notes

- linux-2.6 <not-affected> (vulnerability does not affected kernel module)
- linux-2.6.24 <not-affected> (vulnerability does not affected kernel module)

Search for package or bug name: Reporting problems