CVE-2015-3214
Fixed in a distro release EPSS 2%
The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.
Products: qemu, linux_kernel, arista eos, debian_linux, lenovo emc_px12-400r_ivx, lenovo emc_px12-450r_ivx, redhat openstack, redhat virtualization, redhat enterprise_linux_compute_node_eus, redhat enterprise_linux_for_power_big_endian, redhat enterprise_linux_for_power_big_endian_eus, redhat enterprise_linux_for_scientific_computing, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_from_rhui, redhat enterprise_linux_server_tus, redhat enterprise_linux_server_update_services_for_sap_solutions, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | qemu | 1:2.4+dfsg-1a |
| Debian 12 | xen | 4.4.0-1 |
| Debian 13 | qemu | 1:2.4+dfsg-1a |
| Debian 13 | xen | 4.4.0-1 |
| Debian 14 | qemu | 1:2.4+dfsg-1a |
| Debian 14 | xen | 4.4.0-1 |
| Debian 8 | qemu | 1:2.1+dfsg-12+deb8u2 |
| Red Hat Enterprise Linux 7 | libcacard | 10:1.5.3-86.el7_1.5 |
| Red Hat Enterprise Linux 7 | libcacard-devel | 10:1.5.3-86.el7_1.5 |
| Red Hat Enterprise Linux 7 | libcacard-devel-rhev | 10:2.1.2-23.el7_1.6 |
| Red Hat Enterprise Linux 7 | libcacard-rhev | 10:2.1.2-23.el7_1.6 |
| Red Hat Enterprise Linux 7 | libcacard-tools | 10:1.5.3-86.el7_1.5 |
| Red Hat Enterprise Linux 7 | libcacard-tools-rhev | 10:2.1.2-23.el7_1.6 |
| Red Hat Enterprise Linux 7 | qemu-img | 10:1.5.3-86.el7_1.5 |
| Red Hat Enterprise Linux 7 | qemu-img-rhev | 10:2.1.2-23.el7_1.6 |
| Red Hat Enterprise Linux 7 | qemu-kvm | 10:1.5.3-86.el7_1.5 |
| Red Hat Enterprise Linux 7 | qemu-kvm-common | 10:1.5.3-86.el7_1.5 |
| Red Hat Enterprise Linux 7 | qemu-kvm-common-rhev | 10:2.1.2-23.el7_1.6 |
| Red Hat Enterprise Linux 7 | qemu-kvm-debuginfo | 10:1.5.3-86.el7_1.5 |
| Red Hat Enterprise Linux 7 | qemu-kvm-rhev | 10:2.1.2-23.el7_1.6 |
| Red Hat Enterprise Linux 7 | qemu-kvm-rhev-debuginfo | 10:2.1.2-23.el7_1.6 |
| Red Hat Enterprise Linux 7 | qemu-kvm-tools | 10:1.5.3-86.el7_1.5 |
| Red Hat Enterprise Linux 7 | qemu-kvm-tools-rhev | 10:2.1.2-23.el7_1.6 |
| Red Hat openstack 5 | libcacard-devel-rhev | 10:2.1.2-23.el7_1.6 |
| Red Hat openstack 5 | libcacard-rhev | 10:2.1.2-23.el7_1.6 |
| Red Hat openstack 5 | libcacard-tools-rhev | 10:2.1.2-23.el7_1.6 |
| Red Hat openstack 5 | qemu-img-rhev | 10:2.1.2-23.el7_1.6 |
| Red Hat openstack 5 | qemu-kvm-common-rhev | 10:2.1.2-23.el7_1.6 |
| Red Hat openstack 5 | qemu-kvm-rhev | 10:2.1.2-23.el7_1.6 |
| Red Hat openstack 5 | qemu-kvm-rhev-debuginfo | 10:2.1.2-23.el7_1.6 |
| Red Hat openstack 5 | qemu-kvm-tools-rhev | 10:2.1.2-23.el7_1.6 |
| Red Hat openstack 6 | libcacard-devel-rhev | 10:2.1.2-23.el7_1.6 |
| Red Hat openstack 6 | libcacard-rhev | 10:2.1.2-23.el7_1.6 |
| Red Hat openstack 6 | libcacard-tools-rhev | 10:2.1.2-23.el7_1.6 |
| Red Hat openstack 6 | qemu-img-rhev | 10:2.1.2-23.el7_1.6 |
| Red Hat openstack 6 | qemu-kvm-common-rhev | 10:2.1.2-23.el7_1.6 |
| Red Hat openstack 6 | qemu-kvm-rhev | 10:2.1.2-23.el7_1.6 |
| Red Hat openstack 6 | qemu-kvm-rhev-debuginfo | 10:2.1.2-23.el7_1.6 |
| Red Hat openstack 6 | qemu-kvm-tools-rhev | 10:2.1.2-23.el7_1.6 |
| SUSE Linux Enterprise Desktop 12 | qemu | 2.0.2-48.19.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | kvm | 1.4.2-46.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | kvm | 1.4.2-46.1 |
| SUSE Linux Enterprise Server 11 SP4 | kvm | 1.4.2-44.1 |
| SUSE Linux Enterprise Server 12 | qemu | 2.0.2-48.19.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | kvm | 1.4.2-44.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | qemu | 2.0.2-48.19.1 |
| Ubuntu 14.04 LTS | qemu | 2.0.0+dfsg-2ubuntu1.15 |