CVE-2015-3214
See a problem?- Source
- https://nvd.nist.gov/vuln/detail/CVE-2015-3214
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2015-3214.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2015-3214
- Related
- Published
- 2015-08-31T10:59:07Z
- Modified
- 2024-09-18T01:00:22Z
- Summary
- [none]
- Details
-
The pitioportread in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.
- References
-
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee73f656a604d5aa9df86a97102e4e462dd79924
- http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.33
- http://rhn.redhat.com/errata/RHSA-2015-1507.html
- http://rhn.redhat.com/errata/RHSA-2015-1508.html
- http://rhn.redhat.com/errata/RHSA-2015-1512.html
- http://www.debian.org/security/2015/dsa-3348
- http://www.securityfocus.com/bid/75273
- http://www.securitytracker.com/id/1032598
- https://security.gentoo.org/glsa/201510-02
- https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13
- https://www.exploit-db.com/exploits/37990/
- http://www.openwall.com/lists/oss-security/2015/06/25/7
- https://github.com/torvalds/linux/commit/ee73f656a604d5aa9df86a97102e4e462dd79924
- https://bugzilla.redhat.com/show_bug.cgi?id=1229640
- https://support.lenovo.com/product_security/qemu
- https://support.lenovo.com/us/en/product_security/qemu
- https://www.mail-archive.com/qemu-devel%40nongnu.org/msg304138.html
- https://security-tracker.debian.org/tracker/CVE-2015-3214
Affected packages
Debian:11 / qemu
Package
- Name
- qemu
- Purl
- pkg:deb/debian/qemu?arch=source
Debian:12 / qemu
Package
- Name
- qemu
- Purl
- pkg:deb/debian/qemu?arch=source
Debian:13 / qemu
Package
- Name
- qemu
- Purl
- pkg:deb/debian/qemu?arch=source
Debian:11 / xen
Package
- Name
- xen
- Purl
- pkg:deb/debian/xen?arch=source
Debian:12 / xen
Package
- Name
- xen
- Purl
- pkg:deb/debian/xen?arch=source
Debian:13 / xen
Package
- Name
- xen
- Purl
- pkg:deb/debian/xen?arch=source