CVE ID:	CVE-2016-7909
Description:	The pcnet_rdra_addr function in hw/net/pcnet.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by setting the (1) receive or (2) transmit descriptor ring length to 0.
Test IDs:	1.3.6.1.4.1.25623.1.1.1.2.2016.698   1.3.6.1.4.1.25623.1.1.1.2.2016.689
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-7909 93275 http://www.securityfocus.com/bid/93275 GLSA-201611-11 https://security.gentoo.org/glsa/201611-11 [debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html [oss-security] 20161003 CVE Request Qemu: net: pcnet: infinite loop in pcnet_rdra_addr http://www.openwall.com/lists/oss-security/2016/10/03/3 [oss-security] 20161003 Re: CVE Request Qemu: net: pcnet: infinite loop in pcnet_rdra_addr http://www.openwall.com/lists/oss-security/2016/10/03/6 [qemu-devel] 20160930 [PATCH 1/2] net: pcnet: check rx/tx descriptor ring length https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg07942.html openSUSE-SU-2016:3237 http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html