Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2015-3214

Good to know:

icon

Date: August 31, 2015

The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.

Language: C

Severity Score

Related Resources (22)

https://security.gentoo.org/glsa/201510-02
https://people.canonical.com/~ubuntu-security/cve/CVE-2015-3214
http://rhn.redhat.com/errata/RHSA-2015-1507.html
http://rhn.redhat.com/errata/RHSA-2015-1512.html
http://rhn.redhat.com/errata/RHSA-2015-1508.html
http://www.openwall.com/lists/oss-security/2015/06/25/7
https://security-tracker.debian.org/tracker/CVE-2015-3214
https://access.redhat.com/security/cve/CVE-2015-3214
https://nvd.nist.gov/vuln/detail/CVE-2015-3214
https://bugzilla.redhat.com/show_bug.cgi?id=1229640
http://www.debian.org/security/2015/dsa-3348
http://www.securityfocus.com/bid/75273
https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee73f656a604d5aa9df86a97102e4e462dd79924
https://www.mail-archive.com/qemu-devel%40nongnu.org/msg304138.html
https://www.exploit-db.com/exploits/37990/
http://www.securitytracker.com/id/1032598
https://support.lenovo.com/product_security/qemu
https://github.com/torvalds/linux/commit/ee73f656a604d5aa9df86a97102e4e462dd79924
http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.33
https://support.lenovo.com/us/en/product_security/qemu
https://www.mend.io/vulnerability-database/CVE-2015-3214

Severity Score

Weakness Type (CWE)

Buffer Errors

CWE-119

Top Fix

icon

Upgrade Version

Upgrade to version Linux kernel - 2.6.33;QEMU - 2.3.1

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): HIGH
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): LOCAL
Access Complexity (AC): MEDIUM
Authentication (AU): NONE
Confidentiality (C): COMPLETE
Integrity (I): COMPLETE
Availability (A): COMPLETE
Additional information:

Do you need more information?

Contact Us