Name: CVE-2010-0309: Undefined Security Weakness
Creator: Rapid7
Published: 2010-02-12T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2010-0309, CWE-16, CVSS 6.5, EPSS 0.00993

The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit_state data structure, which allows guest OS users to cause a denial of service (host OS crash or hang) by attempting to read the /dev/port file.

CVSS Details

CVSS 3.1 Base Score: 6.5

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	Upgrade kvm-qemu-imgUpgrade kvmUpgrade kvm-toolsUpgrade kmod-kvm	Dec 1, 2016	Feb 12, 2010
Oracle_linux	—	Upgrade kvm-qemu-imgUpgrade kvm-toolsUpgrade kvmUpgrade kmod-kvm	Oct 16, 2024	Feb 12, 2010
Ubuntu	—	Upgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.27-17-genericUpgrade linux-image-2.6.31-20-386Upgrade linux-image-2.6.24-27-386Upgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.28-18-lpiaUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.27-17-serverUpgrade linux-image-2.6.31-20-lpiaUpgrade linux-image-2.6.24-27-mckinleyUpgrade linux-image-2.6.24-27-sparc64-smpUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.24-27-lpiacompatUpgrade linux-image-2.6.28-18-imx51Upgrade linux-image-2.6.28-18-ixp4xxUpgrade linux-image-2.6.24-27-itaniumUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.28-18-virtualUpgrade linux-image-2.6.31-212-doveUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.24-27-virtualUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.31-20-ia64Upgrade linux-image-2.6.24-27-hppa64Upgrade linux-image-2.6.24-27-genericUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.24-27-rtUpgrade linux-image-2.6.31-20-sparc64-smpUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.24-27-serverUpgrade linux-image-2.6.24-27-openvzUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.31-305-ec2Upgrade linux-image-2.6.24-27-lpiaUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.31-20-genericUpgrade linux-image-2.6.27-17-virtualUpgrade linux-image-2.6.31-109-imx51Upgrade linux-image-2.6.24-27-hppa32Upgrade linux-image-2.6.28-18-iop32xUpgrade linux-image-2.6.24-27-powerpc64-smpUpgrade linux-image-2.6.28-18-versatileUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.24-27-powerpc-smpUpgrade linux-image-2.6.31-20-generic-paeUpgrade linux-image-2.6.31-20-sparc64Upgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.31-20-powerpc-smpUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.31-20-serverUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.28-18-serverUpgrade linux-image-2.6.28-18-genericUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.31-212-dove-z0Upgrade linux-image-2.6.31-20-powerpcUpgrade linux-image-2.6.24-27-sparc64Upgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.31-20-virtualUpgrade linux-image-2.6.24-27-powerpcUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.31-20-powerpc64-smpUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.24-27-xen	Nov 8, 2024	Feb 12, 2010

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business