CVE-2015-6855
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.5%
hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash.
Produtos afetados
n/a · n/aReferências
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168602.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-October/169036.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-October/169039.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-October/169327.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-October/169341.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-September/167369.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.htmlhttps://lists.gnu.org/archive/html/qemu-devel/2015-09/msg02479.htmlhttps://security.gentoo.org/glsa/201602-01https://www.arista.com/en/support/advisories-notices/security-advisories/1188-security-advisory-14http://www.debian.org/security/2015/dsa-3361http://www.debian.org/security/2015/dsa-3362