Detections
Analytics
CVE-2016-8909
medium
Description
The intel_hda_xfer function in hw/audio/intel-hda.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via an entry with the same value for buffer length and pointer position.
References
https://security.gentoo.org/glsa/201611-11
https://lists.gnu.org/archive/html/qemu-devel/2016-10/msg04682.html
https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html
https://access.redhat.com/errata/RHSA-2017:2408
https://access.redhat.com/errata/RHSA-2017:2392
http://www.securityfocus.com/bid/93842
http://www.openwall.com/lists/oss-security/2016/10/24/4
http://www.openwall.com/lists/oss-security/2016/10/24/1
http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html