Tracker / CVE-2015-3214
CVE-2015-3214
Medium 6.9
The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.
Affected products and versions
| arista | eos |
|---|---|
| debian | debian_linux |
| lenovo | emc_px12-400r_ivx · … → 1.0.10.33264 |
| lenovo | emc_px12-450r_ivx · … → 1.0.10.33264 |
| linux | linux_kernel · … → 2.6.32 |
| qemu | qemu · … → 2.3.0 |
| redhat | enterprise_linux_compute_node_eus |
| redhat | enterprise_linux_for_power_big_endian |
| redhat | enterprise_linux_for_power_big_endian_eus |
| redhat | enterprise_linux_for_scientific_computing |
| redhat | enterprise_linux_server |
| redhat | enterprise_linux_server_aus |
| redhat | enterprise_linux_server_eus |
| redhat | enterprise_linux_server_from_rhui |
| redhat | enterprise_linux_server_tus |
| redhat | enterprise_linux_server_update_services_for_sap_solutions |
| redhat | enterprise_linux_workstation |
| redhat | openstack |
| redhat | virtualization |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.