Back to search
CVE-2015-3214
Published: Aug 31, 2015
Modified: Aug 6, 2024
PUBLISHED
Description
The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
https://support.lenovo.com/product_security/qemu
x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1229640
x_refsource_CONFIRM
https://support.lenovo.com/us/en/product_security/qemu
x_refsource_CONFIRM
37990
exploit
x_refsource_EXPLOIT-DB
GLSA-201510-02
vendor-advisory
x_refsource_GENTOO
DSA-3348
vendor-advisory
x_refsource_DEBIAN
RHSA-2015:1508
vendor-advisory
x_refsource_REDHAT
RHSA-2015:1507
vendor-advisory
x_refsource_REDHAT
http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.33
x_refsource_CONFIRM
RHSA-2015:1512
vendor-advisory
x_refsource_REDHAT
1032598
vdb-entry
x_refsource_SECTRACK
75273
vdb-entry
x_refsource_BID
[qemu-devel] 20150617 Re: [PATCH] i8254: fix out-of-bounds memory access in pit_ioport_read()
mailing-list
x_refsource_MLIST
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now