CVE-2016-9776: Debian Linux
Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.
QEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue. It could occur while receiving packets in 'mcf_fec_receive'. A privileged user/process inside guest could use this issue to crash the QEMU process on the host leading to DoS.
Affected products
Published 2016-12-29. Last modified 2026-06-17.