Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2016-9776

Date: December 29, 2016

QEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue. It could occur while receiving packets in 'mcf_fec_receive'. A privileged user/process inside guest could use this issue to crash the QEMU process on the host leading to DoS.

Severity Score

Related Resources (11)

https://security-tracker.debian.org/tracker/CVE-2016-9776
https://bugzilla.redhat.com/show_bug.cgi?id=1400829
https://security.gentoo.org/glsa/201701-49
https://lists.gnu.org/archive/html/qemu-devel/2016-11/msg05324.html
https://nvd.nist.gov/vuln/detail/CVE-2016-9776
http://www.securityfocus.com/bid/94638
http://www.openwall.com/lists/oss-security/2016/12/02/8
https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html
https://people.canonical.com/~ubuntu-security/cve/CVE-2016-9776
http://www.openwall.com/lists/oss-security/2016/12/02/3
https://www.mend.io/vulnerability-database/CVE-2016-9776

Severity Score

Weakness Type (CWE)

Loop with Unreachable Exit Condition ('Infinite Loop')

CWE-835

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): LOCAL
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us