CVE-2016-9776
QEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue. It could occur while receiving packets in 'mcf_fec_receive'. A privileged user/process inside guest could use this issue to crash the QEMU process on the host leading to DoS.
02 / AFFECTED SOFTWARE
Affected packages
116 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
QEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue. It could occur while receiving packets in 'mcf_fec_receive'. A privileged user/process inside guest could use this issue to crash the QEMU process on the host leading to DoS.
05 / REFERENCES
Further evidence
- http://www.openwall.com/lists/oss-security/2016/12/02/3
- http://www.openwall.com/lists/oss-security/2016/12/02/8
- http://www.securityfocus.com/bid/94638
- https://bugzilla.redhat.com/show_bug.cgi?id=1400829
- https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html
- https://lists.gnu.org/archive/html/qemu-devel/2016-11/msg05324.html
- https://security.gentoo.org/glsa/201701-49