[Secure-testing-team] Bug#795461: qemu: CVE-2015-3214: i8254: out-of-bounds memory access in pit_ioport_read function

[Salvatore Bonaccorso]

Source: qemu
Version: 1:2.1+dfsg-1
Severity: normal
Tags: security upstream patch fixed-upstream

Hi,

the following vulnerability was published for qemu. Filling it as
severity normal only, since AFAICT, by default QEMU/KVM guests use
in-kernel (KVM) PIT emulation and thus not vulnerable.

CVE-2015-3214[0]:
i8254: out-of-bounds memory access in pit_ioport_read function

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2015-3214
[1] https://bugzilla.redhat.com/show_bug.cgi?id=1229640

Regards,
Salvatore