Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2015-3214

CWE-119 — Buffer Overflow13 documents9 sources
Severity
6.9MEDIUM
EPSS
1.6%
top 18.34%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
19
Lenovo EMC Px12-400r IVXLenovo EMC Px12-450r IVXLinux Linux Kernel+16 more
Timeline
PublishedAug 31
Latest updateMay 13

Description

The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.

CVSS vector

AV:L/AC:M/C:C/I:C/A:CExploitability: 3.4 | Impact: 10.0

Affected Packages13 packages

▶NVDlinux/linux_kernel2.6.32
▶Debianqemu< 1:2.4+dfsg-1a+3
▶Ubuntuqemu< 2.0.0+dfsg-2ubuntu1.15
▶NVDqemu/qemu2.3.0

Also affects: Debian Linux 7.0, 8.0, Enterprise Linux 7.0, 7.1_ppc64, 7.2_ppc64, 7.3_ppc64, 7.4_ppc64, 7.5_ppc64, 7.6_ppc64, 7.7_ppc64, 7.3, 7.4, 7.6, 7.7, 7.1, 7.2, 7.5

Patches

Patch: git.kernel.org ↗Patch: github.com ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

4
GHSA
GHSA-7g3q-j68f-2fw5: The pit_ioport_read in i8254↗2022-05-13
▶
OSV
CVE-2015-3214: The pit_ioport_read in i8254↗2015-08-31
▶
CVEList
CVE-2015-3214: The pit_ioport_read in i8254↗2015-08-31
▶
OSV
qemu vulnerabilities↗2015-07-28
▶

💥Exploits & PoCs

1
Exploit-DB
QEMU - Programmable Interrupt Timer Controller Heap Overflow↗2015-08-27
▶

📋Vendor Advisories

3
Ubuntu
QEMU vulnerabilities↗2015-07-28
▶
Red Hat
qemu/kvm: i8254: out-of-bounds memory access in pit_ioport_read function↗2015-06-16
▶
Debian
CVE-2015-3214: linux - The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before...↗2015
▶

💬Community

4
Bugzilla
CVE-2018-3214 OpenJDK: Infinite loop in RIFF format reader (Sound, 8205361)↗2018-10-15
▶
Bugzilla
CVE-2015-3214 qemu: qemu/kvm: i8254: out-of-bounds memory access in pit_ioport_read function [epel-7]↗2015-07-16
▶
Bugzilla
CVE-2015-3214 qemu: qemu/kvm: i8254: out-of-bounds memory access in pit_ioport_read function [fedora-all]↗2015-07-16
▶
Bugzilla
CVE-2015-3214 qemu/kvm: i8254: out-of-bounds memory access in pit_ioport_read function↗2015-06-09
▶