CVE - CVE-2016-9776

CVE-ID
CVE-2016-9776	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
QEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue. It could occur while receiving packets in 'mcf_fec_receive'. A privileged user/process inside guest could use this issue to crash the QEMU process on the host leading to DoS.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:94638 URL:http://www.securityfocus.com/bid/94638 MISC:GLSA-201701-49 URL:https://security.gentoo.org/glsa/201701-49 MISC:[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update URL:https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html MISC:[oss-security] 20161202 CVE request Qemu: net: mcf_fec: infinite loop while receiving data in mcf_fec_receive URL:http://www.openwall.com/lists/oss-security/2016/12/02/3 MISC:[oss-security] 20161202 Re: CVE request Qemu: net: mcf_fec: infinite loop while receiving data in mcf_fec_receive URL:http://www.openwall.com/lists/oss-security/2016/12/02/8 MISC:[qemu-devel] 20161130 [PATCH] net: mcf: check receive buffer size register value URL:https://lists.gnu.org/archive/html/qemu-devel/2016-11/msg05324.html MISC:https://bugzilla.redhat.com/show_bug.cgi?id=1400829 URL:https://bugzilla.redhat.com/show_bug.cgi?id=1400829
Assigning CNA
Red Hat, Inc.
Date Record Created
20161202	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20161202)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)