Patchwire CVEs, their patch status, and feeds to follow them

CVE-2016-9923

Fixed in a distro release EPSS 1%

Quick Emulator (Qemu) built with the 'chardev' backend support is vulnerable to a use after free issue. It could occur while hotplug and unplugging the device in the guest. A guest user/process could use this flaw to crash a Qemu process on the host resulting in DoS.

Published 2016-12-23 · CVE record · OSV

Products: qemu

Distro releases

ReleasePackageFixed in
Debian 12qemu1:2.8+dfsg-1
Debian 13qemu1:2.8+dfsg-1
Debian 14qemu1:2.8+dfsg-1
Ubuntu Pro 14.04 LTSqemuno fix
Ubuntu Pro 16.04 LTSqemuno fix