CVE-2016-9776
- State
- Published
- Severity
- Not scored
- Published
- Dec 29, 2016
- Updated
- Aug 6, 2024
- Reserved
- Dec 2, 2016
Description
QEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue. It could occur while receiving packets in 'mcf_fec_receive'. A privileged user/process inside guest could use this issue to crash the QEMU process on the host leading to DoS.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security updatemailing-list
- GLSA-201701-49vendor-advisory
- [oss-security] 20161202 CVE request Qemu: net: mcf_fec: infinite loop while receiving data in mcf_fec_receivemailing-list
- [oss-security] 20161202 Re: CVE request Qemu: net: mcf_fec: infinite loop while receiving data in mcf_fec_receivemailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=1400829
- 94638vdb-entry
- [qemu-devel] 20161130 [PATCH] net: mcf: check receive buffer size register valuemailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.