K51841514 : QEMU vulnerability CVE-2015-6855

Security Advisory Description

hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash. (CVE-2015-6855)
Impact
A locally authenticated privilege user in the Virtual Clustered Multiprocessing (vCMP) guest may be able to use the flaw to crash the vCMP guest. Crashing of the single guest instance is the only known impact at this time. This vulnerability is not exposed unless a system is running in a vCMP deployment model.