CVE-2016-9776

—

CVSS 3.1

5.5 medium

EPSS

<1%p35

Published

Dec 29, 2016 (Dec 29, 2016)

Modified

Jun 17, 2026

Description

QEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue. It could occur while receiving packets in 'mcf_fec_receive'. A privileged user/process inside guest could use this issue to crash the QEMU process on the host leading to DoS.

Vendors: qemu debian
Products: qemu, debian linux
Weakness: CWE-835
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.