CVE-2015-6855
- State
- Published
- Severity
- Not scored
- Published
- Nov 6, 2015
- Updated
- Aug 6, 2024
- Reserved
- Sep 10, 2015
Description
hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- DSA-3361vendor-advisory
- 76691vdb-entry
- FEDORA-2015-16369vendor-advisory
- FEDORA-2015-16370vendor-advisory
- FEDORA-2015-d6ea74993avendor-advisory
- [oss-security] 20150910 Re: CVE request Qemu: ide: divide by zero issuemailing-list
- SUSE-SU-2015:1782vendor-advisory
- [oss-security] 20150910 CVE request Qemu: ide: divide by zero issuemailing-list
- FEDORA-2015-16368vendor-advisory
- DSA-3362vendor-advisory
- USN-2745-1vendor-advisory
- FEDORA-2015-8dc71ade88vendor-advisory
- [Qemu-devel] 20150907 [PATCH] ide: fix ATAPI command permissionsmailing-list
- FEDORA-2015-4896530727vendor-advisory
- GLSA-201602-01vendor-advisory
- https://www.arista.com/en/support/advisories-notices/security-advisories/1188-security-advisory-14
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.