CVE-2015-6855

Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)

Description The issue is related to the QEMU emulator's handling of ATAPI devices, where it fails to properly restrict commands accepted from these devices. This can be exploited by a remote attacker to cause a denial of service or possibly other unspecified impacts by using certain IDE commands. For example, sending a WIN READ NATIVE MAX command to an empty drive can trigger a divide-by-zero error, leading to an instance crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.