6

CVE-2016-8909

The intel_hda_xfer function in hw/audio/intel-hda.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via an entry with the same value for buffer length and pointer position.

Data is provided by the National Vulnerability Database (NVD)
Qemu ≫ Qemu Version <= 2.7.1
Debian ≫ Debian Linux Version8.0
Opensuse ≫ Leap Version42.2
Redhat ≫ Openstack Version6.0
Redhat ≫ Openstack Version7.0
Redhat ≫ Openstack Version8
Redhat ≫ Openstack Version9
Redhat ≫ Openstack Version10
Redhat ≫ Openstack Version11
Redhat ≫ Virtualization Version4.0
   Redhat ≫ Enterprise Linux Version7.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.04% 0.099
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6 1.5 4
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:N/A:P
CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

http://www.openwall.com/lists/oss-security/2016/10/24/1
Patch
Third Party Advisory
Mailing List
http://www.securityfocus.com/bid/93842
Third Party Advisory
VDB Entry