Description
QEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue. It could occur while receiving packets in 'mcf_fec_receive'. A privileged user/process inside guest could use this issue to crash the QEMU process on the host leading to DoS.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html ↗
- https://security.gentoo.org/glsa/201701-49 ↗
- http://www.openwall.com/lists/oss-security/2016/12/02/3 ↗
- http://www.openwall.com/lists/oss-security/2016/12/02/8 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=1400829 ↗
- http://www.securityfocus.com/bid/94638 ↗
- https://lists.gnu.org/archive/html/qemu-devel/2016-11/msg05324.html ↗