Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2015-3214

🗓️ 31 Aug 2015 10:00:00Reported by redhatType 
cve
 cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 172 Views

The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index

Related
Detection
Refs
Social
ReporterTitlePublishedViews
Family
0day.today		QEMU Programmable Interrupt Timer Controller Heap Overflow Exploit
27 Aug 201500:00
–zdt
FreeBSD		qemu -- code execution on host machine
17 Jun 201500:00
–freebsd
Arista		Security Advisory 0013
4 Sep 201500:00
–arista
ArchLinux		qemu: multiple issues
29 Jul 201500:00
–archlinux
IBM Security Bulletins		Security Bulletin: PowerKVM is affected by two Qemu vulnerabilities
18 Jun 201801:28
–ibm
Tenable Nessus		CentOS 7 : qemu-kvm (CESA-2015:1507)
28 Jul 201500:00
–nessus
Tenable Nessus		Debian DSA-3348-1 : qemu - security update
3 Sep 201500:00
–nessus
Tenable Nessus		Fedora 23 : qemu-2.4.0-1.fc23 (2015-13358)
24 Aug 201500:00
–nessus
Tenable Nessus		Fedora 22 : qemu-2.3.1-1.fc22 (2015-13402)
18 Aug 201500:00
–nessus
Tenable Nessus		Fedora 21 : qemu-2.1.3-9.fc21 (2015-13404)
2 Sep 201500:00
–nessus
Rows per page
NVD
Node
qemuqemuRange≤2.3.0
OR
linuxlinux_kernelRange≤2.6.32
Node
aristaeosMatch4.12
OR
aristaeosMatch4.13
OR
aristaeosMatch4.14
OR
aristaeosMatch4.15
Node
debiandebian_linuxMatch7.0
OR
debiandebian_linuxMatch8.0
Node
lenovoemc_px12-400r_ivxRange<1.0.10.33264
OR
lenovoemc_px12-450r_ivxRange<1.0.10.33264
Node
redhatopenstackMatch5.0
OR
redhatopenstackMatch6.0
OR
redhatvirtualizationMatch3.0
OR
redhatenterprise_linux_compute_node_eusMatch7.1
OR
redhatenterprise_linux_compute_node_eusMatch7.2
OR
redhatenterprise_linux_compute_node_eusMatch7.3
OR
redhatenterprise_linux_compute_node_eusMatch7.4
OR
redhatenterprise_linux_compute_node_eusMatch7.5
OR
redhatenterprise_linux_compute_node_eusMatch7.6
OR
redhatenterprise_linux_compute_node_eusMatch7.7
OR
redhatenterprise_linux_for_power_big_endianMatch7.0
OR
redhatenterprise_linux_for_power_big_endian_eusMatch7.1_ppc64
OR
redhatenterprise_linux_for_power_big_endian_eusMatch7.2_ppc64
OR
redhatenterprise_linux_for_power_big_endian_eusMatch7.3_ppc64
OR
redhatenterprise_linux_for_power_big_endian_eusMatch7.4_ppc64
OR
redhatenterprise_linux_for_power_big_endian_eusMatch7.5_ppc64
OR
redhatenterprise_linux_for_power_big_endian_eusMatch7.6_ppc64
OR
redhatenterprise_linux_for_power_big_endian_eusMatch7.7_ppc64
OR
redhatenterprise_linux_for_scientific_computingMatch7.0
OR
redhatenterprise_linux_serverMatch7.0
OR
redhatenterprise_linux_server_ausMatch7.3
OR
redhatenterprise_linux_server_ausMatch7.4
OR
redhatenterprise_linux_server_ausMatch7.6
OR
redhatenterprise_linux_server_ausMatch7.7
OR
redhatenterprise_linux_server_eusMatch7.1
OR
redhatenterprise_linux_server_eusMatch7.2
OR
redhatenterprise_linux_server_eusMatch7.3
OR
redhatenterprise_linux_server_eusMatch7.4
OR
redhatenterprise_linux_server_eusMatch7.5
OR
redhatenterprise_linux_server_eusMatch7.6
OR
redhatenterprise_linux_server_eusMatch7.7
OR
redhatenterprise_linux_server_from_rhuiMatch7.0
OR
redhatenterprise_linux_server_tusMatch7.3
OR
redhatenterprise_linux_server_tusMatch7.6
OR
redhatenterprise_linux_server_tusMatch7.7
OR
redhatenterprise_linux_server_update_services_for_sap_solutionsMatch7.2
OR
redhatenterprise_linux_server_update_services_for_sap_solutionsMatch7.3
OR
redhatenterprise_linux_server_update_services_for_sap_solutionsMatch7.4
OR
redhatenterprise_linux_server_update_services_for_sap_solutionsMatch7.6
OR
redhatenterprise_linux_server_update_services_for_sap_solutionsMatch7.7
OR
redhatenterprise_linux_workstationMatch7.0

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
06 May 2026 22:30Current
6.1Medium risk
Vulners AI Score6.1
CVSS 26.9
EPSS0.01593
CWE-119
cve-2015-3214linux kernelqemui8254.csecurity vulnerabilityarbitrary code execution
172