CVE-2010-0309 — Vulnetix

CVE-2010-0309 PUBLISHED CVSS 6.800000190734863 MEDIUM

The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit_state data structure, which allows guest OS users to cause a denial of service (host OS crash or hang) by attempting to read the /dev/port file.

EPSS 0.77% · 73.8th percentile

Risk Scores

CVSS 2.0

6.800000190734863

EPSS Score

0.77%

73.8th percentile

Affected Products

Vendor	Product	Versions
linux	kernel
n/a	n/a	n/a

Exploit Intelligence

38158 (circl)
USN-914-1 (circl)
ADV-2010-0638 (circl)
RHSA-2010:0088 (circl)
38922 (circl)
[oss-security] 20100202 Re: CVE request - kvm: cat /dev/port in the guest can cause host DoS (circl)
DSA-1996 (circl)
oval:org.mitre.oval:def:11095 (circl)
https://bugzilla.redhat.com/show_bug.cgi?id=560887 (circl)
[oss-security] 20100202 CVE request - kvm: cat /dev/port in the guest can cause host DoS (circl)

…and 3 more exploits

Timeline

Feb 12, 2010 CVE Published
Feb 4, 2022 EPSS Score
Mar 29, 2022 EPSS Score
May 2, 2022 CVE Updated
May 20, 2022 EPSS Score
Jul 12, 2022 EPSS Score
Sep 4, 2022 EPSS Score
Oct 26, 2022 EPSS Score
Dec 18, 2022 EPSS Score
Feb 9, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Apr 2, 2023 EPSS Score

References

38158 vdb
USN-914-1 vendor-advisory
ADV-2010-0638 vdb
RHSA-2010:0088 vendor-advisory
38922 third-party-advisory
[oss-security] 20100202 Re: CVE request - kvm: cat /dev/port in the guest can cause host DoS mailing-list
DSA-1996 vendor-advisory
oval:org.mitre.oval:def:11095 vdb
https://bugzilla.redhat.com/show_bug.cgi?id=560887 url
[oss-security] 20100202 CVE request - kvm: cat /dev/port in the guest can cause host DoS mailing-list
[kvm] 20100129 KVM: PIT: control word is write-only mailing-list
RHSA-2010:0095 vendor-advisory
38492 third-party-advisory
https://nvd.nist.gov/vuln/detail/CVE-2010-0309 advisory
http://www.mail-archive.com/kvm@vger.kernel.org/msg28002.html url

Open in Interactive Console →