hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Jul 30, 2024 | Nov 6, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Dec 2, 2015 |
| Freebsd | — | Upgrade qemu-sbrunoUpgrade qemu-user-staticUpgrade qemuUpgrade qemu-devel | Dec 10, 2025 | Jan 2, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Nov 6, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Dec 4, 2019 | Nov 6, 2015 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Apr 16, 2020 | Nov 6, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 9, 2015 |
| Suse | — | Upgrade qemu-seabiosUpgrade qemu-s390xUpgrade xen-doc-htmlUpgrade qemu-block-sshUpgrade qemu-block-iscsiUpgrade qemu-ksmUpgrade qemu-ui-spice-coreUpgrade xen-kmp-paeUpgrade xen-libsUpgrade xenUpgrade qemu-s390Upgrade qemu-ipxeUpgrade qemu-x86Upgrade qemu-microvmUpgrade qemu-vgabiosUpgrade qemu-kvmUpgrade qemu-audio-alsaUpgrade qemu-chardev-spiceUpgrade qemu-ui-gtkUpgrade xen-kmp-defaultUpgrade qemu-block-rbdUpgrade xen-libs-32bitUpgrade xen-doc-pdfUpgrade qemu-chardev-baumUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xen-toolsUpgrade qemu-block-curlUpgrade qemu-audio-spiceUpgrade qemu-guest-agentUpgrade qemu-hw-display-virtio-vgaUpgrade xen-tools-domUUpgrade kvmUpgrade qemuUpgrade qemu-langUpgrade qemu-hw-usb-redirectUpgrade qemu-armUpgrade qemu-ui-spice-appUpgrade qemu-skibootUpgrade qemu-ui-openglUpgrade qemu-audio-ossUpgrade qemu-ui-cursesUpgrade qemu-hw-display-qxlUpgrade xen-develUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ppcUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-sgabiosUpgrade qemu-audio-paUpgrade qemu-tools | Dec 18, 2015 | Oct 20, 2015 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-kvm | Nov 8, 2024 | Nov 6, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub