National Cyber Awareness System

Vulnerability Summary for CVE-2010-0309

Overview

The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit_state data structure, which allows guest OS users to cause a denial of service (host OS crash or hang) by attempting to read the /dev/port file.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: REDHAT

Name: RHSA-2010:0095

Type: Advisory; Patch Information

Hyperlink:https://rhn.redhat.com/errata/RHSA-2010-0095.html

External Source: REDHAT

Name: RHSA-2010:0088

Type: Advisory

Hyperlink:https://rhn.redhat.com/errata/RHSA-2010-0088.html

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=560887

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=560887

External Source: VUPEN

Name: ADV-2010-0638

Hyperlink:http://www.vupen.com/english/advisories/2010/0638

External Source: UBUNTU

Name: USN-914-1

Hyperlink:http://www.ubuntu.com/usn/USN-914-1

External Source: BID

Name: 38158

Hyperlink:http://www.securityfocus.com/bid/38158

External Source: MLIST

Name: [oss-security] 20100202 Re: CVE request - kvm: cat /dev/port in the guest can cause host DoS

Hyperlink:http://www.openwall.com/lists/oss-security/2010/02/02/4

External Source: MLIST

Name: [oss-security] 20100202 CVE request - kvm: cat /dev/port in the guest can cause host DoS

Hyperlink:http://www.openwall.com/lists/oss-security/2010/02/02/1

External Source: MLIST

Name: [kvm] 20100129 KVM: PIT: control word is write-only

Hyperlink:http://www.mail-archive.com/kvm@vger.kernel.org/msg28002.html

External Source: DEBIAN

Name: DSA-1996

Hyperlink:http://www.debian.org/security/2010/dsa-1996

External Source: SECUNIA

Name: 38922

Hyperlink:http://secunia.com/advisories/38922

External Source: SECUNIA

Name: 38492

Hyperlink:http://secunia.com/advisories/38492

External Source: OVAL

Name: oval:org.mitre.oval:def:11095

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11095

References to Check Content

Identifier:oval:org.mitre.oval:def:11095

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:11095