VYPR
Medium severity6.5NVD Advisory· Published Dec 23, 2016· Updated May 6, 2026

CVE-2016-9921

CVE-2016-9921

Description

Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a divide by zero issue. It could occur while copying VGA data when cirrus graphics mode was set to be VGA. A privileged user inside guest could use this flaw to crash the Qemu process instance on the host, resulting in DoS.

Affected products

12
  • QEMU/Qemu4 versions
    cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*range: <=2.7.1
    • cpe:2.3:a:qemu:qemu:2.8.0:rc0:*:*:*:*:*:*
    • cpe:2.3:a:qemu:qemu:2.8.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:qemu:qemu:2.8.0:rc2:*:*:*:*:*:*
  • Red Hat/Openstack6 versions
    cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:openstack:11:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:openstack:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:openstack:7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.