Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-9776
5.5
MEDIUMCVSS v3
Published
December 29, 2016
CVSS v2
2.1 LOW
Affected
5 projects
Assigned by
Red Hat
Severity scale
010
Description
QEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue. It could occur while receiving packets in 'mcf_fec_receive'. A privileged user/process inside guest could use this issue to crash the QEMU process on the host leading to DoS.
qemu-project/qemuGitLabQEMU main repository: Please see https://www.qemu.org/docs/master/devel/submitting-a-patch.html for how to submit changes to QEMU. Pull Requests are ignored. Please only use release tarballs from the QEMU website. http://www.qemu.org
GitLabQEMU main repository: Please see https://www.qemu.org/docs/master/devel/submitting-a-patch.html for how to submit changes to QEMU. Pull Requests are ignored. Please only use release tarballs from the QEMU website. http://www.qemu.org<= 2.7.1, = 2.8.0NVD
qemu/qemu
GitHubOfficial QEMU mirror. Please see https://www.qemu.org/contribute/ for how to submit changes to QEMU. Pull Requests are disabled. Please only use release tarballs from the QEMU website.
GitHubOfficial QEMU mirror. Please see https://www.qemu.org/contribute/ for how to submit changes to QEMU. Pull Requests are disabled. Please only use release tarballs from the QEMU website.<= 2.7.1, = 2.8.0NVD