| Package | Affected versions | Patched versions |
|---|---|---|
| qemu | ≤ 2.3.0 | |
| openstack | = 5.0= 6.0 | |
| virtualization | = 3.0 |
The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free