CVE-2015-6855 in QEMU
Summary
hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
09/10/2015
Disclosure
11/06/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 77689 | Fabrice Bellard QEMU CD/DVD-ROM Emulator access control | 264 | Unproven | Official fix | CVE-2015-6855 |