Total vulnerabilities in the database
hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash.
| Software | From | Fixed in |
|---|---|---|
| qemu / qemu | - | 2.4.1.x |
| debian / debian_linux | 8.0 | 8.0.x |
| debian / debian_linux | 7.0 | 7.0.x |
| debian / debian_linux | 9.0 | 9.0.x |
| fedoraproject / fedora | 22 | 22.x |
| fedoraproject / fedora | 23 | 23.x |
| fedoraproject / fedora | 21 | 21.x |
| suse / linux_enterprise_server | 12 | 12.x |
| suse / linux_enterprise_desktop | 12 | 12.x |
| canonical / ubuntu_linux | 15.04 | 15.04.x |
| canonical / ubuntu_linux | 12.04 | 12.04.x |
| canonical / ubuntu_linux | 14.04 | 14.04.x |