CVEvulnerability
CVE-2015-3214
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-08-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.
Affected configurations
• qemu qemu (<= 2.3.0)
• linux linux kernel (<= 2.6.32)
• arista eos 4.12
• arista eos 4.13
• arista eos 4.14
• arista eos 4.15
• debian debian linux 7.0
• debian debian linux 8.0
• lenovo emc px12-400r ivx (< 1.0.10.33264)
• lenovo emc px12-450r ivx (< 1.0.10.33264)
• redhat openstack 5.0
• redhat openstack 6.0
• redhat virtualization 3.0
• redhat enterprise linux compute node eus 7.1
• redhat enterprise linux compute node eus 7.2
• redhat enterprise linux compute node eus 7.3
• redhat enterprise linux compute node eus 7.4
• redhat enterprise linux compute node eus 7.5
• redhat enterprise linux compute node eus 7.6
• redhat enterprise linux compute node eus 7.7
• redhat enterprise linux for power big endian 7.0
• redhat enterprise linux for power big endian eus 7.1 ppc64
• redhat enterprise linux for power big endian eus 7.2 ppc64
• redhat enterprise linux for power big endian eus 7.3 ppc64
• redhat enterprise linux for power big endian eus 7.4 ppc64
• redhat enterprise linux for power big endian eus 7.5 ppc64
• redhat enterprise linux for power big endian eus 7.6 ppc64
• redhat enterprise linux for power big endian eus 7.7 ppc64
• redhat enterprise linux for scientific computing 7.0
• redhat enterprise linux server 7.0
• redhat enterprise linux server aus 7.3
• redhat enterprise linux server aus 7.4
• redhat enterprise linux server aus 7.6
• redhat enterprise linux server aus 7.7
• redhat enterprise linux server eus 7.1
• redhat enterprise linux server eus 7.2
• redhat enterprise linux server eus 7.3
• redhat enterprise linux server eus 7.4
• redhat enterprise linux server eus 7.5
• redhat enterprise linux server eus 7.6
• redhat enterprise linux server eus 7.7
• redhat enterprise linux server from rhui 7.0
• redhat enterprise linux server tus 7.3
• redhat enterprise linux server tus 7.6
• redhat enterprise linux server tus 7.7
• redhat enterprise linux server update services for sap solutions 7.2
• redhat enterprise linux server update services for sap solutions 7.3
• redhat enterprise linux server update services for sap solutions 7.4
• redhat enterprise linux server update services for sap solutions 7.6
• redhat enterprise linux server update services for sap solutions 7.7
• redhat enterprise linux workstation 7.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee73f656a604d5aa9df86a97102e4e462dd79924 Patch, Vendor Advisory
- http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.33 Broken Link, Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1507.html Issue Tracking, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1508.html Issue Tracking, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1512.html Third Party Advisory
- http://www.debian.org/security/2015/dsa-3348 Issue Tracking, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2015/06/25/7 Mailing List
- http://www.securityfocus.com/bid/75273 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032598 Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1229640 Issue Tracking
- https://github.com/torvalds/linux/commit/ee73f656a604d5aa9df86a97102e4e462dd79924 Patch, Third Party Advisory
- https://security.gentoo.org/glsa/201510-02 Issue Tracking, Third Party Advisory
- https://support.lenovo.com/product_security/qemu Third Party Advisory
- https://support.lenovo.com/us/en/product_security/qemu Third Party Advisory
- https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13 Third Party Advisory
- https://www.exploit-db.com/exploits/37990/ Third Party Advisory, VDB Entry
- https://www.mail-archive.com/qemu-devel%40nongnu.org/msg304138.html www.mail-archive.com
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee73f656a604d5aa9df86a97102e4e462dd79924 Patch, Vendor Advisory
- http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.33 Broken Link, Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1507.html Issue Tracking, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1508.html Issue Tracking, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1512.html Third Party Advisory
- http://www.debian.org/security/2015/dsa-3348 Issue Tracking, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2015/06/25/7 Mailing List
- http://www.securityfocus.com/bid/75273 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032598 Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1229640 Issue Tracking
- https://github.com/torvalds/linux/commit/ee73f656a604d5aa9df86a97102e4e462dd79924 Patch, Third Party Advisory
- https://security.gentoo.org/glsa/201510-02 Issue Tracking, Third Party Advisory
- https://support.lenovo.com/product_security/qemu Third Party Advisory
- https://support.lenovo.com/us/en/product_security/qemu Third Party Advisory
- https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13 Third Party Advisory
- https://www.exploit-db.com/exploits/37990/ Third Party Advisory, VDB Entry
- https://www.mail-archive.com/qemu-devel%40nongnu.org/msg304138.html www.mail-archive.com