CVE

Id
96596  
CVE No.
CVE-2016-9776  
Status
Candidate  
Description
QEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue. It could occur while receiving packets in "mcf_fec_receive". A privileged user/process inside guest could use this issue to crash the QEMU process on the host leading to DoS.  
Phase
Assigned (20161202)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
801145 96596 CVE-2016-9776 MLIST:[oss-security] 20161202 CVE request Qemu: net: mcf_fec: infinite loop while receiving data in mcf_fec_receive  View
801146 96596 CVE-2016-9776 URL:http://www.openwall.com/lists/oss-security/2016/12/02/3  View
801147 96596 CVE-2016-9776 MLIST:[oss-security] 20161202 Re: CVE request Qemu: net: mcf_fec: infinite loop while receiving data in mcf_fec_receive  View
801148 96596 CVE-2016-9776 URL:http://www.openwall.com/lists/oss-security/2016/12/02/8  View
801149 96596 CVE-2016-9776 MLIST:[qemu-devel] 20161130 [PATCH] net: mcf: check receive buffer size register value  View
801150 96596 CVE-2016-9776 URL:https://lists.gnu.org/archive/html/qemu-devel/2016-11/msg05324.html  View
801151 96596 CVE-2016-9776 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1400829  View
801152 96596 CVE-2016-9776 BID:94638  View

Related JVN