CVE-2010-0309

EUVD-2010-0340
The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit_state data structure, which allows guest OS users to cause a denial of service (host OS crash or hang) by attempting to read the /dev/port file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:N/I:N/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 76%
Affected Products (NVD)
VendorProductVersion
linuxkernel
*
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
kvm
dapper
dne
hardy
ignored
intrepid
ignored
jaunty
ignored
karmic
dne
lucid
dne
maverick
dne
natty
dne
linux
dapper
dne
hardy
Fixed 2.6.24-27.68
released
intrepid
Fixed 2.6.27-17.46
released
jaunty
Fixed 2.6.28-18.60
released
karmic
Fixed 2.6.31-20.58
released
lucid
not-affected
maverick
not-affected
natty
not-affected
linux-ec2
dapper
dne
hardy
dne
intrepid
dne
jaunty
dne
karmic
Fixed 2.6.31-305.13
released
lucid
not-affected
maverick
ignored
natty
dne
linux-fsl-imx51
dapper
dne
hardy
dne
karmic
Fixed 2.6.31-109.25
released
lucid
not-affected
maverick
dne
natty
dne
linux-lts-backport-maverick
dapper
dne
hardy
dne
intrepid
dne
jaunty
dne
karmic
dne
lucid
not-affected
maverick
dne
natty
dne
linux-mvl-dove
dapper
dne
hardy
dne
karmic
Fixed 2.6.31-212.26
released
lucid
not-affected
maverick
not-affected
natty
dne
linux-source-2.6.15
dapper
not-affected
hardy
dne
intrepid
dne
jaunty
dne
karmic
dne
lucid
dne
maverick
dne
natty
dne
linux-ti-omap4
dapper
dne
hardy
dne
karmic
dne
lucid
dne
maverick
not-affected
natty
not-affected
Common Weakness Enumeration