CVE-2010-0309

Name	CVE-2010-0309
Description	The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit_state data structure, which allows guest OS users to cause a denial of service (host OS crash or hang) by attempting to read the /dev/port file.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DSA-1996-1, DSA-2010-1

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
kvm	source	lenny	72+dfsg-5~lenny5	DSA-2010-1
kvm	source	(unstable)	(unfixed)
linux-2.6	source	etch	(not affected)
linux-2.6	source	lenny	2.6.26-21lenny3	DSA-1996-1
linux-2.6	source	(unstable)	2.6.32-8
linux-2.6.24	source	(unstable)	(not affected)

Notes

[etch] - linux-2.6 <not-affected> (kvm introduced in 2.6.25)
- linux-2.6.24 <not-affected> (kvm introduced in 2.6.25)
http://git.kernel.org/?p=linux/kernel/git/avi/kvm.git;a=commitdiff;h=336f40a728b9a4a5db5e1df5c89852c79ff95604