Every CVE Search/ Get API key

CVE-2015-3214

The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not...

6.9 MediumPublic exploitFix available

The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.

Exploit likelihood

1.59%Down 6.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.9

The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.

Record
CVE-2015-3214
CVSS 2.0
6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.

Record
CVE-2015-3214
Updated
2026-11-02
EUVDEUVD-2015-3277 No score

The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.

Record
EUVD-2015-3277
Updated
2026-11-03
GitHub AdvisoriesGHSA-7g3q-j68f-2fw5 No score

The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not...

The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.

Record
GHSA-7g3q-j68f-2fw5
Weakness
CWE-119
Updated
2026-11-02
OSV No score

The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.

Record
CVE-2015-3214
Updated
2026-11-02
OSVDEBIAN-CVE-2015-3214 No score

The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.

Record
DEBIAN-CVE-2015-3214
Updated
2026-11-02
Show 6 moreShow less
OSVMGASA-2015-0310 No score

Updated qemu package fixes security vulnerability

Matt Tait discovered that QEMU incorrectly handled the virtual PCNET driver. A malicious guest could use this issue to cause a denial of service, or possibly execute arbitrary code on the host as the user running the QEMU process (CVE-2015-3209).

Kurt Seifried discovered that QEMU incorrectly handled certain temporary files. A local attacker could use this issue to cause a denial of service (CVE-2015-4037).

Jan Beulich discovered that the QEMU Xen code incorrectly restricted write access to the host MSI message data field. A malicious guest could use this issue to cause a denial of service (CVE-2015-4103).

Jan Beulich discovered that the QEMU Xen code incorrectly restricted access to the PCI MSI mask bits. A malicious guest could use this issue to cause a denial of service (CVE-2015-4104).

Jan Beulich discovered that the QEMU Xen code incorrectly handled MSI-X error messages. A malicious guest could use this issue to cause a denial of service (CVE-2015-4105).

Jan Beulich discovered that the QEMU Xen code incorrectly restricted write access to the PCI config space. A malicious guest could use this issue to cause a denial of service, obtain sensitive information, or possibly execute arbitrary code (CVE-2015-4106).

A heap buffer overflow flaw was found in the way QEMU's IDE subsystem handled I/O buffer access while processing certain ATAPI commands. A privileged guest user in a guest with the CDROM drive enabled could potentially use this flaw to execute arbitrary code on the host with the privileges of the host's QEMU process corresponding to the guest (CVE-2015-5154).

An out-of-bounds memory access flaw, leading to memory corruption or possibly an information leak, was found in QEMU's pit_ioport_read() function. A privileged guest user in a QEMU guest, which had QEMU PIT emulation enabled, could potentially, in rare cases, use this flaw to execute arbitrary code on the host with the privileges of the hosting QEMU process (CVE-2015-3214).

Qemu emulator built with the virtio-serial vmchannel support is vulnerable to a buffer overflow issue. It could occur while exchanging virtio control messages between guest & the host. A malicious guest could use this flaw to corrupt few bytes of Qemu memory area, potentially crashing the Qemu process (CVE-2015-5745).

Record
MGASA-2015-0310
Updated
2026-11-02
OSVSUSE-SU-2016:1560-1 No score

Security update for qemu

qemu was updated to fix 37 security issues.

These security issues were fixed:

  • CVE-2016-4439: Avoid OOB access in 53C9X emulation (bsc#980711)
  • CVE-2016-4441: Avoid OOB access in 53C9X emulation (bsc#980723)
  • CVE-2016-4952: Avoid OOB access in Vmware PV SCSI emulation (bsc#981266)
  • CVE-2015-8817: Avoid OOB access in PCI DMA I/O (bsc#969121)
  • CVE-2015-8818: Avoid OOB access in PCI DMA I/O (bsc#969122)
  • CVE-2016-3710: Fixed VGA emulation based OOB access with potential for guest escape (bsc#978158)
  • CVE-2016-3712: Fixed VGa emulation based DOS and OOB read access exploit (bsc#978160)
  • CVE-2016-4037: Fixed USB ehci based DOS (bsc#976109)
  • CVE-2016-2538: Fixed potential OOB access in USB net device emulation (bsc#967969)
  • CVE-2016-2841: Fixed OOB access / hang in ne2000 emulation (bsc#969350)
  • CVE-2016-2858: Avoid potential DOS when using QEMU pseudo random number generator (bsc#970036)
  • CVE-2016-2857: Fixed OOB access when processing IP checksums (bsc#970037)
  • CVE-2016-4001: Fixed OOB access in Stellaris enet emulated nic (bsc#975128)
  • CVE-2016-4002: Fixed OOB access in MIPSnet emulated controller (bsc#975136)
  • CVE-2016-4020: Fixed possible host data leakage to guest from TPR access (bsc#975700)
  • CVE-2015-3214: Fixed OOB read in i8254 PIC (bsc#934069)
  • CVE-2014-9718: Fixed the handling of malformed or short ide PRDTs to avoid any opportunity for guest to cause DoS by abusing that interface (bsc#928393)
  • CVE-2014-3689: Fixed insufficient parameter validation in rectangle functions (bsc#901508)
  • CVE-2014-3615: The VGA emulator in QEMU allowed local guest users to read host memory by setting the display to a high resolution (bsc#895528).
  • CVE-2015-5239: Integer overflow in vnc_client_read() and protocol_client_msg() (bsc#944463).
  • CVE-2015-5745: Buffer overflow in virtio-serial (bsc#940929).
  • CVE-2015-7295: hw/virtio/virtio.c in the Virtual Network Device (virtio-net) support in QEMU, when big or mergeable receive buffers are not supported, allowed remote attackers to cause a denial of service (guest network consumption) via a flood of jumbo frames on the (1) tuntap or (2) macvtap interface (bsc#947159).
  • CVE-2015-7549: PCI null pointer dereferences (bsc#958917).
  • CVE-2015-8504: VNC floating point exception (bsc#958491).
  • CVE-2015-8558: Infinite loop in ehci_advance_state resulting in DoS (bsc#959005).
  • CVE-2015-8567: A guest repeatedly activating a vmxnet3 device can leak host memory (bsc#959386).
  • CVE-2015-8568: A guest repeatedly activating a vmxnet3 device can leak host memory (bsc#959386).
  • CVE-2015-8613: Wrong sized memset in megasas command handler (bsc#961358).
  • CVE-2015-8619: Potential DoS for long HMP sendkey command argument (bsc#960334).
  • CVE-2015-8743: OOB memory access in ne2000 ioport r/w functions (bsc#960725).
  • CVE-2015-8744: Incorrect l2 header validation could have lead to a crash via assert(2) call (bsc#960835).
  • CVE-2015-8745: Reading IMR registers could have lead to a crash via assert(2) call (bsc#960708).
  • CVE-2016-1568: AHCI use-after-free in aio port commands (bsc#961332).
  • CVE-2016-1714: Potential OOB memory access in processing firmware configuration (bsc#961691).
  • CVE-2016-1922: NULL pointer dereference when processing hmp i/o command (bsc#962320).
  • CVE-2016-1981: Potential DoS (infinite loop) in e1000 device emulation by malicious privileged user within guest (bsc#963782).
  • CVE-2016-2198: Malicious privileged guest user were able to cause DoS by writing to read-only EHCI capabilities registers (bsc#964413).

This non-security issue was fixed

  • bsc#886378: qemu truncates vhd images in virt-rescue
Record
SUSE-SU-2016:1560-1
Updated
2026-11-02
OSVSUSE-SU-2016:1698-1 No score

Security update for kvm

kvm was updated to fix 33 security issues.

These security issues were fixed:

  • CVE-2016-4439: Avoid OOB access in 53C9X emulation (bsc#980711)
  • CVE-2016-4441: Avoid OOB access in 53C9X emulation (bsc#980723)
  • CVE-2016-3710: Fixed VGA emulation based OOB access with potential for guest escape (bsc#978158)
  • CVE-2016-3712: Fixed VGa emulation based DOS and OOB read access exploit (bsc#978160)
  • CVE-2016-4037: Fixed USB ehci based DOS (bsc#976109)
  • CVE-2016-2538: Fixed potential OOB access in USB net device emulation (bsc#967969)
  • CVE-2016-2841: Fixed OOB access / hang in ne2000 emulation (bsc#969350)
  • CVE-2016-2858: Avoid potential DOS when using QEMU pseudo random number generator (bsc#970036)
  • CVE-2016-2857: Fixed OOB access when processing IP checksums (bsc#970037)
  • CVE-2016-4001: Fixed OOB access in Stellaris enet emulated nic (bsc#975128)
  • CVE-2016-4002: Fixed OOB access in MIPSnet emulated controller (bsc#975136)
  • CVE-2016-4020: Fixed possible host data leakage to guest from TPR access (bsc#975700)
  • CVE-2015-3214: Fixed OOB read in i8254 PIC (bsc#934069)
  • CVE-2014-9718: Fixed the handling of malformed or short ide PRDTs to avoid any opportunity for guest to cause DoS by abusing that interface (bsc#928393)
  • CVE-2014-3689: Fixed insufficient parameter validation in rectangle functions (bsc#901508)
  • CVE-2014-3615: The VGA emulator in QEMU allowed local guest users to read host memory by setting the display to a high resolution (bsc#895528).
  • CVE-2015-5239: Integer overflow in vnc_client_read() and protocol_client_msg() (bsc#944463).
  • CVE-2015-5278: Infinite loop in ne2000_receive() function (bsc#945989).
  • CVE-2015-5279: Heap-based buffer overflow in the ne2000_receive function in hw/net/ne2000.c in QEMU allowed guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via vectors related to receiving packets (bsc#945987).
  • CVE-2015-5745: Buffer overflow in virtio-serial (bsc#940929).
  • CVE-2015-6855: hw/ide/core.c in QEMU did not properly restrict the commands accepted by an ATAPI device, which allowed guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash (bsc#945404).
  • CVE-2015-7295: hw/virtio/virtio.c in the Virtual Network Device (virtio-net) support in QEMU, when big or mergeable receive buffers are not supported, allowed remote attackers to cause a denial of service (guest network consumption) via a flood of jumbo frames on the (1) tuntap or (2) macvtap interface (bsc#947159).
  • CVE-2015-7549: PCI null pointer dereferences (bsc#958917).
  • CVE-2015-8504: VNC floating point exception (bsc#958491).
  • CVE-2015-8558: Infinite loop in ehci_advance_state resulting in DoS (bsc#959005).
  • CVE-2015-8613: Wrong sized memset in megasas command handler (bsc#961358).
  • CVE-2015-8619: Potential DoS for long HMP sendkey command argument (bsc#960334).
  • CVE-2015-8743: OOB memory access in ne2000 ioport r/w functions (bsc#960725).
  • CVE-2016-1568: AHCI use-after-free in aio port commands (bsc#961332).
  • CVE-2016-1714: Potential OOB memory access in processing firmware configuration (bsc#961691).
  • CVE-2016-1922: NULL pointer dereference when processing hmp i/o command (bsc#962320).
  • CVE-2016-1981: Potential DoS (infinite loop) in e1000 device emulation by malicious privileged user within guest (bsc#963782).
  • CVE-2016-2198: Malicious privileged guest user were able to cause DoS by writing to read-only EHCI capabilities registers (bsc#964413).

This non-security issue was fixed:

  • Fix case of IDE interface needing busy status set before flush (bsc#936132)
Record
SUSE-SU-2016:1698-1
Updated
2026-11-02
OSVSUSE-SU-2016:1785-1 No score

Security update for kvm

kvm was updated to fix 33 security issues.

These security issues were fixed:

  • CVE-2016-4439: Avoid OOB access in 53C9X emulation (bsc#980711)
  • CVE-2016-4441: Avoid OOB access in 53C9X emulation (bsc#980723)
  • CVE-2016-3710: Fixed VGA emulation based OOB access with potential for guest escape (bsc#978158)
  • CVE-2016-3712: Fixed VGa emulation based DOS and OOB read access exploit (bsc#978160)
  • CVE-2016-4037: Fixed USB ehci based DOS (bsc#976109)
  • CVE-2016-2538: Fixed potential OOB access in USB net device emulation (bsc#967969)
  • CVE-2016-2841: Fixed OOB access / hang in ne2000 emulation (bsc#969350)
  • CVE-2016-2858: Avoid potential DOS when using QEMU pseudo random number generator (bsc#970036)
  • CVE-2016-2857: Fixed OOB access when processing IP checksums (bsc#970037)
  • CVE-2016-4001: Fixed OOB access in Stellaris enet emulated nic (bsc#975128)
  • CVE-2016-4002: Fixed OOB access in MIPSnet emulated controller (bsc#975136)
  • CVE-2016-4020: Fixed possible host data leakage to guest from TPR access (bsc#975700)
  • CVE-2015-3214: Fixed OOB read in i8254 PIC (bsc#934069)
  • CVE-2014-9718: Fixed the handling of malformed or short ide PRDTs to avoid any opportunity for guest to cause DoS by abusing that interface (bsc#928393)
  • CVE-2014-3689: Fixed insufficient parameter validation in rectangle functions (bsc#901508)
  • CVE-2014-3615: The VGA emulator in QEMU allowed local guest users to read host memory by setting the display to a high resolution (bsc#895528).
  • CVE-2015-5239: Integer overflow in vnc_client_read() and protocol_client_msg() (bsc#944463).
  • CVE-2015-5278: Infinite loop in ne2000_receive() function (bsc#945989).
  • CVE-2015-5279: Heap-based buffer overflow in the ne2000_receive function in hw/net/ne2000.c in QEMU allowed guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via vectors related to receiving packets (bsc#945987).
  • CVE-2015-5745: Buffer overflow in virtio-serial (bsc#940929).
  • CVE-2015-6855: hw/ide/core.c in QEMU did not properly restrict the commands accepted by an ATAPI device, which allowed guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash (bsc#945404).
  • CVE-2015-7295: hw/virtio/virtio.c in the Virtual Network Device (virtio-net) support in QEMU, when big or mergeable receive buffers are not supported, allowed remote attackers to cause a denial of service (guest network consumption) via a flood of jumbo frames on the (1) tuntap or (2) macvtap interface (bsc#947159).
  • CVE-2015-7549: PCI null pointer dereferences (bsc#958917).
  • CVE-2015-8504: VNC floating point exception (bsc#958491).
  • CVE-2015-8558: Infinite loop in ehci_advance_state resulting in DoS (bsc#959005).
  • CVE-2015-8613: Wrong sized memset in megasas command handler (bsc#961358).
  • CVE-2015-8619: Potential DoS for long HMP sendkey command argument (bsc#960334).
  • CVE-2015-8743: OOB memory access in ne2000 ioport r/w functions (bsc#960725).
  • CVE-2016-1568: AHCI use-after-free in aio port commands (bsc#961332).
  • CVE-2016-1714: Potential OOB memory access in processing firmware configuration (bsc#961691).
  • CVE-2016-1922: NULL pointer dereference when processing hmp i/o command (bsc#962320).
  • CVE-2016-1981: Potential DoS (infinite loop) in e1000 device emulation by malicious privileged user within guest (bsc#963782).
  • CVE-2016-2198: Malicious privileged guest user were able to cause DoS by writing to read-only EHCI capabilities registers (bsc#964413).

This non-security issue was fixed:

  • Fix case of IDE interface needing busy status set before flush (bsc#936132)
Record
SUSE-SU-2016:1785-1
Updated
2026-11-02
OSVUBUNTU-CVE-2015-3214 No score

The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.

Record
UBUNTU-CVE-2015-3214
Updated
2026-11-02
OSVUSN-2692-1 No score

qemu vulnerabilities

Matt Tait discovered that QEMU incorrectly handled PIT emulation. In a non-default configuration, a malicious guest could use this issue to cause a denial of service, or possibly execute arbitrary code on the host as the user running the QEMU process. In the default installation, when QEMU is used with libvirt, attackers would be isolated by the libvirt AppArmor profile. (CVE-2015-3214)

Kevin Wolf discovered that QEMU incorrectly handled processing ATAPI commands. A malicious guest could use this issue to cause a denial of service, or possibly execute arbitrary code on the host as the user running the QEMU process. In the default installation, when QEMU is used with libvirt, attackers would be isolated by the libvirt AppArmor profile. (CVE-2015-5154)

Zhu Donghai discovered that QEMU incorrectly handled the SCSI driver. A malicious guest could use this issue to cause a denial of service, or possibly execute arbitrary code on the host as the user running the QEMU process. In the default installation, when QEMU is used with libvirt, attackers would be isolated by the libvirt AppArmor profile. This issue only affected Ubuntu 15.04. (CVE-2015-5158)

Record
USN-2692-1
Updated
2026-11-02

Affected products

Show 7 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
qemu
Debian:12
 before 1:2.4+dfsg-1a
1:2.4+dfsg-1a
qemu
Debian:13
 before 1:2.4+dfsg-1a
1:2.4+dfsg-1a
qemu
Debian:14
 before 1:2.4+dfsg-1a
1:2.4+dfsg-1a
xen
Debian:12
 before 4.4.0-1
4.4.0-1
xen
Debian:13
 before 4.4.0-1
4.4.0-1
xen
Debian:14
 before 4.4.0-1
4.4.0-1
qemu
Debian:8
From an advisory covering 5 CVEs
 before 1:2.1+dfsg-12+deb8u2, plus listed versions
1:2.1+dfsg-111:2.1+dfsg-121:2.1+dfsg-12+deb8u11:2.1+dfsg-12~bpo70+1
1:2.1+dfsg-12+deb8u2
qemu
Mageia:4
From an advisory covering 9 CVEs
 before 1.6.2-1.12.mga4
1.6.2-1.12.mga4
qemu
Mageia:5
From an advisory covering 9 CVEs
 before 2.1.3-2.3.mga5
2.1.3-2.3.mga5
libcacard
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
Show 64 moreShow less
Affected packages
PackageAffectedFixed
qemu-img
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
qemu-kvm
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
qemu-kvm-common
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
qemu-kvm-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
qemu-kvm-tools
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
libcacard-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
libcacard-tools
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
libcacard
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
libcacard-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
libcacard-tools
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
qemu-img
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
qemu-kvm
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
qemu-kvm-common
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
qemu-kvm-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
qemu-kvm-tools
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
libcacard
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
qemu-img
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
qemu-kvm
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
qemu-kvm-common
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
qemu-kvm-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
qemu-kvm-tools
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
libcacard-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
libcacard-tools
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
libcacard
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
qemu-img
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
qemu-kvm
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
qemu-kvm-common
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
qemu-kvm-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
qemu-kvm-tools
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
libcacard-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
libcacard-tools
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 10:1.5.3-86.el7_1.5
10:1.5.3-86.el7_1.5
libcacard-devel-rhev
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 2 CVEs
 before 10:2.1.2-23.el7_1.6
10:2.1.2-23.el7_1.6
libcacard-rhev
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 2 CVEs
 before 10:2.1.2-23.el7_1.6
10:2.1.2-23.el7_1.6
libcacard-tools-rhev
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 2 CVEs
 before 10:2.1.2-23.el7_1.6
10:2.1.2-23.el7_1.6
qemu-img-rhev
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 2 CVEs
 before 10:2.1.2-23.el7_1.6
10:2.1.2-23.el7_1.6
qemu-kvm-common-rhev
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 2 CVEs
 before 10:2.1.2-23.el7_1.6
10:2.1.2-23.el7_1.6
qemu-kvm-rhev
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 2 CVEs
 before 10:2.1.2-23.el7_1.6
10:2.1.2-23.el7_1.6
qemu-kvm-rhev-debuginfo
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 2 CVEs
 before 10:2.1.2-23.el7_1.6
10:2.1.2-23.el7_1.6
qemu-kvm-tools-rhev
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 2 CVEs
 before 10:2.1.2-23.el7_1.6
10:2.1.2-23.el7_1.6
libcacard-devel-rhev
Red Hat:openstack:5::el7
From an advisory covering 2 CVEs
 before 10:2.1.2-23.el7_1.6
10:2.1.2-23.el7_1.6
libcacard-rhev
Red Hat:openstack:5::el7
From an advisory covering 2 CVEs
 before 10:2.1.2-23.el7_1.6
10:2.1.2-23.el7_1.6
libcacard-tools-rhev
Red Hat:openstack:5::el7
From an advisory covering 2 CVEs
 before 10:2.1.2-23.el7_1.6
10:2.1.2-23.el7_1.6
qemu-img-rhev
Red Hat:openstack:5::el7
From an advisory covering 2 CVEs
 before 10:2.1.2-23.el7_1.6
10:2.1.2-23.el7_1.6
qemu-kvm-common-rhev
Red Hat:openstack:5::el7
From an advisory covering 2 CVEs
 before 10:2.1.2-23.el7_1.6
10:2.1.2-23.el7_1.6
qemu-kvm-rhev
Red Hat:openstack:5::el7
From an advisory covering 2 CVEs
 before 10:2.1.2-23.el7_1.6
10:2.1.2-23.el7_1.6
qemu-kvm-rhev-debuginfo
Red Hat:openstack:5::el7
From an advisory covering 2 CVEs
 before 10:2.1.2-23.el7_1.6
10:2.1.2-23.el7_1.6
qemu-kvm-tools-rhev
Red Hat:openstack:5::el7
From an advisory covering 2 CVEs
 before 10:2.1.2-23.el7_1.6
10:2.1.2-23.el7_1.6
libcacard-devel-rhev
Red Hat:openstack:6::el7
From an advisory covering 2 CVEs
 before 10:2.1.2-23.el7_1.6
10:2.1.2-23.el7_1.6
libcacard-rhev
Red Hat:openstack:6::el7
From an advisory covering 2 CVEs
 before 10:2.1.2-23.el7_1.6
10:2.1.2-23.el7_1.6
libcacard-tools-rhev
Red Hat:openstack:6::el7
From an advisory covering 2 CVEs
 before 10:2.1.2-23.el7_1.6
10:2.1.2-23.el7_1.6
qemu-img-rhev
Red Hat:openstack:6::el7
From an advisory covering 2 CVEs
 before 10:2.1.2-23.el7_1.6
10:2.1.2-23.el7_1.6
qemu-kvm-common-rhev
Red Hat:openstack:6::el7
From an advisory covering 2 CVEs
 before 10:2.1.2-23.el7_1.6
10:2.1.2-23.el7_1.6
qemu-kvm-rhev
Red Hat:openstack:6::el7
From an advisory covering 2 CVEs
 before 10:2.1.2-23.el7_1.6
10:2.1.2-23.el7_1.6
qemu-kvm-rhev-debuginfo
Red Hat:openstack:6::el7
From an advisory covering 2 CVEs
 before 10:2.1.2-23.el7_1.6
10:2.1.2-23.el7_1.6
qemu-kvm-tools-rhev
Red Hat:openstack:6::el7
From an advisory covering 2 CVEs
 before 10:2.1.2-23.el7_1.6
10:2.1.2-23.el7_1.6
qemu
SUSE:Linux Enterprise Desktop 12
From an advisory covering 37 CVEs
 before 2.0.2-48.19.1
2.0.2-48.19.1
qemu
SUSE:Linux Enterprise Server 12
From an advisory covering 37 CVEs
 before 2.0.2-48.19.1
2.0.2-48.19.1
qemu
SUSE:Linux Enterprise Server for SAP Applications 12
From an advisory covering 37 CVEs
 before 2.0.2-48.19.1
2.0.2-48.19.1
kvm
SUSE:Linux Enterprise Server 11 SP3-LTSS
From an advisory covering 33 CVEs
 before 1.4.2-46.1
1.4.2-46.1
kvm
SUSE:Linux Enterprise Server 11 SP3-TERADATA
From an advisory covering 33 CVEs
 before 1.4.2-46.1
1.4.2-46.1
kvm
SUSE:Linux Enterprise Server 11 SP4
From an advisory covering 33 CVEs
 before 1.4.2-44.1
1.4.2-44.1
kvm
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
From an advisory covering 33 CVEs
 before 1.4.2-44.1
1.4.2-44.1
qemu
Ubuntu:14.04:LTS
 before 2.0.0+dfsg-2ubuntu1.15, plus listed versions
1.5.0+dfsg-3ubuntu51.5.0+dfsg-3ubuntu61.6.0+dfsg-2ubuntu11.6.0+dfsg-2ubuntu21.6.0+dfsg-2ubuntu3
Show 34 moreShow less
1.6.0+dfsg-2ubuntu41.7.0+dfsg-2ubuntu11.7.0+dfsg-2ubuntu21.7.0+dfsg-2ubuntu31.7.0+dfsg-2ubuntu41.7.0+dfsg-2ubuntu51.7.0+dfsg-2ubuntu71.7.0+dfsg-2ubuntu81.7.0+dfsg-2ubuntu91.7.0+dfsg-3ubuntu1~ppa11.7.0+dfsg-3ubuntu11.7.0+dfsg-3ubuntu21.7.0+dfsg-3ubuntu31.7.0+dfsg-3ubuntu41.7.0+dfsg-3ubuntu51.7.0+dfsg-3ubuntu61.7.0+dfsg-3ubuntu72.0.0~rc1+dfsg-0ubuntu12.0.0~rc1+dfsg-0ubuntu22.0.0~rc1+dfsg-0ubuntu32.0.0~rc1+dfsg-0ubuntu3.12.0.0+dfsg-2ubuntu12.0.0+dfsg-2ubuntu1.12.0.0+dfsg-2ubuntu1.22.0.0+dfsg-2ubuntu1.32.0.0+dfsg-2ubuntu1.52.0.0+dfsg-2ubuntu1.62.0.0+dfsg-2ubuntu1.72.0.0+dfsg-2ubuntu1.82.0.0+dfsg-2ubuntu1.92.0.0+dfsg-2ubuntu1.102.0.0+dfsg-2ubuntu1.112.0.0+dfsg-2ubuntu1.132.0.0+dfsg-2ubuntu1.14
2.0.0+dfsg-2ubuntu1.15
qemu
Ubuntu:14.04:LTS
From an advisory covering 2 CVEs
 before 2.0.0+dfsg-2ubuntu1.15, plus listed versions
1.5.0+dfsg-3ubuntu51.5.0+dfsg-3ubuntu61.6.0+dfsg-2ubuntu11.6.0+dfsg-2ubuntu21.6.0+dfsg-2ubuntu3
Show 34 moreShow less
1.6.0+dfsg-2ubuntu41.7.0+dfsg-2ubuntu11.7.0+dfsg-2ubuntu21.7.0+dfsg-2ubuntu31.7.0+dfsg-2ubuntu41.7.0+dfsg-2ubuntu51.7.0+dfsg-2ubuntu71.7.0+dfsg-2ubuntu81.7.0+dfsg-2ubuntu91.7.0+dfsg-3ubuntu1~ppa11.7.0+dfsg-3ubuntu11.7.0+dfsg-3ubuntu21.7.0+dfsg-3ubuntu31.7.0+dfsg-3ubuntu41.7.0+dfsg-3ubuntu51.7.0+dfsg-3ubuntu61.7.0+dfsg-3ubuntu72.0.0~rc1+dfsg-0ubuntu12.0.0~rc1+dfsg-0ubuntu22.0.0~rc1+dfsg-0ubuntu32.0.0~rc1+dfsg-0ubuntu3.12.0.0+dfsg-2ubuntu12.0.0+dfsg-2ubuntu1.12.0.0+dfsg-2ubuntu1.22.0.0+dfsg-2ubuntu1.32.0.0+dfsg-2ubuntu1.52.0.0+dfsg-2ubuntu1.62.0.0+dfsg-2ubuntu1.72.0.0+dfsg-2ubuntu1.82.0.0+dfsg-2ubuntu1.92.0.0+dfsg-2ubuntu1.102.0.0+dfsg-2ubuntu1.112.0.0+dfsg-2ubuntu1.132.0.0+dfsg-2ubuntu1.14
2.0.0+dfsg-2ubuntu1.15

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBQEMU - Programmable Interrupt Timer Controller Heap Overflow2015-08-27

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-3214 is a medium vulnerability (CVSS 6.9) in Debian Linux, published June 17, 2015. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.59%, the 75th percentile. Fixed in qemu 1:2.4+dfsg-1a.

References

Show 123 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open