NVD

Id
27673  
Name
CVE-2015-6855  
Description
hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-11-06  
Modified Date
2015-11-09  
Seq
2015-6855  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
145164 27673 CVE-2015-6855 FEDORA-2015-8dc71ade88  View
145165 27673 CVE-2015-6855 FEDORA-2015-16369  View
145166 27673 CVE-2015-6855 FEDORA-2015-16368  View
145167 27673 CVE-2015-6855 FEDORA-2015-4896530727  View
145168 27673 CVE-2015-6855 FEDORA-2015-d6ea74993a  View
145169 27673 CVE-2015-6855 FEDORA-2015-16370  View
145170 27673 CVE-2015-6855 SUSE-SU-2015:1782  View
145171 27673 CVE-2015-6855 DSA-3361  View
145172 27673 CVE-2015-6855 DSA-3362  View
145173 27673 CVE-2015-6855 [oss-security] 20150910 CVE request Qemu: ide: divide by zero issue  View
145174 27673 CVE-2015-6855 [oss-security] 20150910 Re: CVE request Qemu: ide: divide by zero issue  View
145175 27673 CVE-2015-6855 76691  View
145176 27673 CVE-2015-6855 USN-2745-1  View
145177 27673 CVE-2015-6855 [Qemu-devel] 20150907 [PATCH] ide: fix ATAPI command permissions  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10460 JVNDB-2015-005780 QEMU の hw/ide/core.c におけるサービス運用妨害 (DoS) の脆弱性 QEMU の hw/ide/core.c は、ATAPI デバイスに受理されたコマンドを適切に制限しないため、サービス運用妨害 (DoS) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2015-6855 84080 CVE-2015-6855 27673 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005780.html 2015-09-09 2015-11-10 View