VulnerabilityModified

CVE-2007-1321

HIGH 7.2EPSS 0.46%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.46%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness error. NOTE: this identifier was inadvertently used by some sources to cover multiple issues that were labeled "NE2000 network driver and the socket code," but separate identifiers have been created for the individual vulnerabilities since there are sometimes different fixes; see CVE-2007-5729 and CVE-2007-5730.

CVSS 2.0: 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS: 0.46% probability · 39th percentile
CISA KEV: Not listed
Affected: qemu/qemu · fedoraproject/fedora · fedoraproject/fedora core · debian/debian linux
Source: cve@mitre.org

References

http://osvdb.org/35495Broken Link
http://secunia.com/advisories/25073Third Party Advisory
http://secunia.com/advisories/25095Third Party Advisory
http://secunia.com/advisories/27047Third Party Advisory
http://secunia.com/advisories/27072Third Party Advisory
http://secunia.com/advisories/27103Third Party Advisory
http://secunia.com/advisories/27486Third Party Advisory
http://secunia.com/advisories/29129Third Party Advisory
http://securitytracker.com/id?1018761Third Party Advisory, VDB Entry
http://taviso.decsystem.org/virtsec.pdfTechnical Description, Third Party Advisory
http://www.attrition.org/pipermail/vim/2007-October/001842.htmlThird Party Advisory
http://www.debian.org/security/2007/dsa-1284Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:203Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:162Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0323.htmlThird Party Advisory
http://www.securityfocus.com/bid/23731Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/1597Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9302Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00004.htmlThird Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00030.htmlThird Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00082.htmlThird Party Advisory
http://osvdb.org/35495Broken Link
http://secunia.com/advisories/25073Third Party Advisory
http://secunia.com/advisories/25095Third Party Advisory
http://secunia.com/advisories/27047Third Party Advisory
http://secunia.com/advisories/27072Third Party Advisory
http://secunia.com/advisories/27103Third Party Advisory
http://secunia.com/advisories/27486Third Party Advisory
http://secunia.com/advisories/29129Third Party Advisory
http://securitytracker.com/id?1018761Third Party Advisory, VDB Entry

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.