Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-3214HistoryAug 31, 2015 - 10:59 a.m.
CVE-2015-3214
2015-08-3110:59:00
Debian Security Bug Tracker
security-tracker.debian.org
24
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
37.6%
The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | linux | <Â 6.1.76-1 | linux_6.1.76-1_all.deb |
| Debian | 11 | all | linux | <Â 5.10.209-2 | linux_5.10.209-2_all.deb |
| Debian | 10 | all | linux | <Â 4.19.249-2 | linux_4.19.249-2_all.deb |
| Debian | 999 | all | linux | <Â 6.7.12-1 | linux_6.7.12-1_all.deb |
| Debian | 13 | all | linux | <Â 6.7.12-1 | linux_6.7.12-1_all.deb |
| Debian | 12 | all | qemu | <Â 1:2.4+dfsg-1a | qemu_1:2.4+dfsg-1a_all.deb |
| Debian | 11 | all | qemu | <Â 1:2.4+dfsg-1a | qemu_1:2.4+dfsg-1a_all.deb |
| Debian | 10 | all | qemu | <Â 1:2.4+dfsg-1a | qemu_1:2.4+dfsg-1a_all.deb |
| Debian | 999 | all | qemu | <Â 1:2.4+dfsg-1a | qemu_1:2.4+dfsg-1a_all.deb |
| Debian | 13 | all | qemu | <Â 1:2.4+dfsg-1a | qemu_1:2.4+dfsg-1a_all.deb |
Related
veracode
veracode
Arbitrary Code Execution
2019-01-15 09:06:51
Heap-Based Buffer Overflow
2019-05-02 05:41:34
zdt
zdt
QEMU Programmable Interrupt Timer Controller Heap Overflow Exploit
2015-08-27 00:00:00
freebsd
freebsd
qemu -- code execution on host machine
2015-06-17 00:00:00
ubuntucve
ubuntucve
CVE-2015-3214
2015-06-17 00:00:00
cve
cve
CVE-2015-3214
2015-08-31 10:59:00
prion
prion
Code injection
2015-08-31 10:59:00
nessus
nessus
FreeBSD : qemu -- code execution on host machine (aea8d90e-b0c1-11e5-8d13-bc5ff45d0f28)
2016-01-04 00:00:00
RHEL 7 : qemu-kvm (RHSA-2015:1507)
2015-07-28 00:00:00
Scientific Linux Security Update : qemu-kvm on SL7.x x86_64 (20150727)
2015-07-29 00:00:00
lenovo
lenovo
QEMU i8254 PIT Emulation Bug
2017-01-23 00:00:00
oraclelinux
oraclelinux
qemu-kvm security and bug fix update
2015-07-27 00:00:00
redhat
redhat
(RHSA-2015:1508) Important: qemu-kvm-rhev security update
2015-07-27 12:44:34
(RHSA-2015:1512) Important: qemu-kvm-rhev security update
2015-07-28 00:00:00
(RHSA-2015:1507) Important: qemu-kvm security and bug fix update
2015-07-27 00:00:00
openvas
openvas
RedHat Update for qemu-kvm RHSA-2015:1507-01
2015-08-03 00:00:00
CentOS Update for libcacard CESA-2015:1507 centos7
2015-08-10 00:00:00
Oracle: Security Advisory (ELSA-2015-1507)
2015-10-06 00:00:00
ibm
ibm
Security Bulletin: PowerKVM is affected by two Qemu vulnerabilities
2018-06-18 01:28:53
centos
centos
libcacard, qemu security update
2015-07-27 17:01:12
securityvulns
securityvulns
[USN-2692-1] QEMU vulnerabilities
2015-08-03 00:00:00
libvirt / qemu multiple security vulnerabilities
2015-08-31 00:00:00
archlinux
archlinux
qemu: multiple issues
2015-07-29 00:00:00
ubuntu
ubuntu
QEMU vulnerabilities
2015-07-28 00:00:00
f5
f5
gentoo
gentoo
QEMU: Arbitrary code execution
2015-10-31 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: qemu-2.1.3-9.fc21
2015-09-01 07:30:01
[SECURITY] Fedora 23 Update: qemu-2.4.0-1.fc23
2015-08-23 16:43:19
[SECURITY] Fedora 22 Update: qemu-2.3.1-1.fc22
2015-08-18 05:17:10
debian
debian
[SECURITY] [DSA 3348-1] qemu security update
2015-09-02 16:22:51
[SECURITY] [DSA 3348-1] qemu security update
2015-09-02 16:22:30
osv
osv
qemu - security update
2015-09-02 00:00:00
arista
arista
Security Advisory 0013
2015-09-04 00:00:00
mageia
mageia
Updated qemu package fixes security vulnerability
2015-08-11 23:22:53
suse
suse
Security update for kvm (important)
2016-07-11 16:39:09
Security update for kvm (important)
2016-06-28 20:07:43
Security update for qemu (important)
2016-06-13 13:08:26
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
37.6%
Related for DEBIANCVE:CVE-2015-3214