CVE-2016-9776
29.12.2016, 22:59
QEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue. It could occur while receiving packets in 'mcf_fec_receive'. A privileged user/process inside guest could use this issue to crash the QEMU process on the host leading to DoS.
| Vendor | Product | Version |
|---|---|---|
| qemu | qemu | 𝑥 ≤ 2.7.1 |
| qemu | qemu | 2.8.0:rc0 |
| qemu | qemu | 2.8.0:rc1 |
| qemu | qemu | 2.8.0:rc2 |
| debian | debian_linux | 8.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| qemu |
| ||||||||||||||||||||||||||
| qemu-kvm |
|
Common Weakness Enumeration
References