VYPR
Medium severity6.0NVD Advisory· Published Nov 4, 2016· Updated May 6, 2026

CVE-2016-8910

CVE-2016-8910

Description

The rtl8139_cplus_transmit function in hw/net/rtl8139.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) by leveraging failure to limit the ring descriptor count.

Affected products

10
  • cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*
    Range: <=2.7.1
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
  • cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*
  • Red Hat/Openstack6 versions
    cpe:2.3:a:redhat:openstack:6.0:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:redhat:openstack:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:openstack:7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:openstack:11:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

9

News mentions

0

No linked articles in our index yet.