Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

releasealert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2015-3214 — MEDIUM severity vulnerability | Release Alert

CVE-2015-3214

6.9

MEDIUMCVSS v2

Published

August 31, 2015

Affected

6 projects

Assigned by

Red Hat

Severity scale

010

Description

The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.

torvalds/linux

GitHubLinux kernel source tree

NVD

qemu-project/qemu

GitLabQEMU main repository: Please see https://www.qemu.org/docs/master/devel/submitting-a-patch.html for how to submit changes to QEMU. Pull Requests are ignored. Please only use release tarballs from the QEMU website. http://www.qemu.org

<= 2.3.0NVD

qemu/qemu

GitHub

More on this CVE

NVD↗GitHub Advisory↗

Official QEMU mirror. Please see https://www.qemu.org/contribute/ for how to submit changes to QEMU. Pull Requests are disabled. Please only use release tarballs from the QEMU website.

<= 2.3.0NVD

bonzini/qemu

GitHubMy QEMU tree

<= 2.3.0NVD

birkelund/qemu

<= 2.3.0NVD

thuth/qemu

GitLabQEMU mirror for GitLab CI: Please see http://wiki.qemu.org/Contribute/SubmitAPatch for how to submit changes to QEMU. Pull Requests are ignored. Please only use release tarballs from the QEMU website. http://www.qemu.org

<= 2.3.0NVD