6.9

CVE-2015-3214

The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qemu ≫ Qemu Version <= 2.3.0
Linux ≫ Linux Kernel Version <= 2.6.32
Arista ≫ Eos Version 4.12
Arista ≫ Eos Version 4.13
Arista ≫ Eos Version 4.14
Arista ≫ Eos Version 4.15
Debian ≫ Debian Linux Version 7.0
Debian ≫ Debian Linux Version 8.0
Lenovo ≫ Emc Px12-400r Ivx Version < 1.0.10.33264
Lenovo ≫ Emc Px12-450r Ivx Version < 1.0.10.33264
Redhat ≫ Openstack Version 5.0
Redhat ≫ Openstack Version 6.0
Redhat ≫ Virtualization Version 3.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.59% 0.725
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.33
Vendor Advisory
Broken Link
https://security.gentoo.org/glsa/201510-02
Third Party Advisory
Issue Tracking
https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1507.html
Third Party Advisory
Issue Tracking
http://rhn.redhat.com/errata/RHSA-2015-1508.html
Third Party Advisory
Issue Tracking
http://rhn.redhat.com/errata/RHSA-2015-1512.html
Third Party Advisory
http://www.debian.org/security/2015/dsa-3348
Third Party Advisory
Issue Tracking
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee73f656a604d5aa9df86a97102e4e462dd79924
Patch
Vendor Advisory
http://www.openwall.com/lists/oss-security/2015/06/25/7
Mailing List
http://www.securityfocus.com/bid/75273
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1032598
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1229640
Issue Tracking
https://github.com/torvalds/linux/commit/ee73f656a604d5aa9df86a97102e4e462dd79924
Patch
Third Party Advisory
https://support.lenovo.com/product_security/qemu
Third Party Advisory
https://support.lenovo.com/us/en/product_security/qemu
Third Party Advisory
https://www.exploit-db.com/exploits/37990/
Third Party Advisory
VDB Entry
https://www.mail-archive.com/qemu-devel%40nongnu.org/msg304138.html