The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit_state data structure, which allows guest OS users to cause a denial of service (host OS crash or hang) by attempting to read the /dev/port file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kvm-qemu-imgUpgrade kvmUpgrade kvm-toolsUpgrade kmod-kvm | Dec 1, 2016 | Feb 12, 2010 |
| Oracle_linux | — | Upgrade kvm-qemu-imgUpgrade kvm-toolsUpgrade kvmUpgrade kmod-kvm | Oct 16, 2024 | Feb 12, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.28-18-versatileUpgrade linux-image-2.6.24-27-serverUpgrade linux-image-2.6.28-18-genericUpgrade linux-image-2.6.24-27-powerpc64-smpUpgrade linux-image-2.6.27-17-virtualUpgrade linux-image-2.6.24-27-powerpcUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.31-20-virtualUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.28-18-serverUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.24-27-hppa32Upgrade linux-image-2.6.24-27-xenUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.31-305-ec2Upgrade linux-image-2.6.24-27-hppa64Upgrade linux-image-2.6.31-20-sparc64-smpUpgrade linux-image-2.6.24-27-openvzUpgrade linux-image-2.6.24-27-powerpc-smpUpgrade linux-image-2.6.31-20-genericUpgrade linux-image-2.6.31-20-powerpcUpgrade linux-image-2.6.31-20-generic-paeUpgrade linux-image-2.6.31-20-sparc64Upgrade linux-image-2.6.24-27-genericUpgrade linux-image-2.6.24-27-rtUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.28-18-iop32xUpgrade linux-image-2.6.24-27-sparc64Upgrade linux-image-2.6.24-27-lpiaUpgrade linux-image-2.6.31-20-powerpc64-smpUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.31-20-serverUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.31-212-dove-z0Upgrade linux-image-2.6.31-109-imx51Upgrade linux-image-2.6.31-20-powerpc-smpUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.24-27-lpiacompatUpgrade linux-image-2.6.24-27-386Upgrade linux-image-2.6.27-17-serverUpgrade linux-image-2.6.31-20-386Upgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.31-212-doveUpgrade linux-image-2.6.28-18-imx51Upgrade linux-image-2.6.28-18-ixp4xxUpgrade linux-image-2.6.24-27-itaniumUpgrade linux-image-2.6.28-18-virtualUpgrade linux-image-2.6.27-17-genericUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.31-20-lpiaUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.24-27-mckinleyUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.28-18-lpiaUpgrade linux-image-2.6.31-20-ia64Upgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.24-27-virtualUpgrade linux-image-2.6.24-27-sparc64-smp | Nov 8, 2024 | Feb 12, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub