NVD

Id
25108  
Name
CVE-2015-3214  
Description
The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-08-31  
Modified Date
2016-12-21  
Seq
2015-3214  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
132730 25108 CVE-2015-3214 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee73f656a604d5aa9df86a97102e4e462dd79924  View
132731 25108 CVE-2015-3214 http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.33  View
132732 25108 CVE-2015-3214 RHSA-2015:1507  View
132733 25108 CVE-2015-3214 RHSA-2015:1508  View
132734 25108 CVE-2015-3214 RHSA-2015:1512  View
132735 25108 CVE-2015-3214 [oss-security] 20150625 Re: CVE request -- Linux kernel - kvm: x86: out-of-bounds memory access in pit_ioport_read function  View
132736 25108 CVE-2015-3214 75273  View
132737 25108 CVE-2015-3214 1032598  View
132738 25108 CVE-2015-3214 https://bugzilla.redhat.com/show_bug.cgi?id=1229640  View
132739 25108 CVE-2015-3214 https://github.com/torvalds/linux/commit/ee73f656a604d5aa9df86a97102e4e462dd79924  View
132740 25108 CVE-2015-3214 GLSA-201510-02  View
132741 25108 CVE-2015-3214 https://support.lenovo.com/product_security/qemu  View
132742 25108 CVE-2015-3214 https://support.lenovo.com/us/en/product_security/qemu  View
132743 25108 CVE-2015-3214 [qemu-devel] 20150617 Re: [PATCH] i8254: fix out-of-bounds memory access in pit_ioport_read()  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9192 JVNDB-2015-004512 Linux Kernel および QEMU の i8254.c の pit_ioport_read におけるホスト OS 上で任意のコードを実行される脆弱性 Linux Kernel および QEMU の i8254.c の pit_ioport_read は、読み込みの長さ、および書き込みの長さを識別しないため、ホスト OS 上で任意のコードを実行される脆弱性が存在します。 CVE-2015-3214 80439 CVE-2015-3214 25108 6.9 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004512.html 2015-02-10 2015-09-01 View