[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2016-8909":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T14:53:31.930Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":19,"aliases":20,"duplicate_of":9,"upstream":21,"downstream":22,"duplicates":59,"related":60,"reserved_at":9,"published_at":70,"modified_at":71,"state":72,"summary":73,"references_raw":82,"kevs":130,"epss":131,"epss_history":134,"metrics":395,"affected":406},"CVE-2016-8909","The intel_hda_xfer function in hw/audio/intel-hda.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via an entry with the same value for buffer length and pointer position.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-835","Loop with Unreachable Exit Condition ('Infinite Loop')","The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.","weakness","Incomplete","Base",[],[],[],[],[23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57],{"_key":24},"ALPINE-CVE-2016-8909",{"_key":26},"SUSE-SU-2016:3083-1",{"_key":28},"OPENSUSE-SU-2024:11287-1",{"_key":30},"SUSE-SU-2016:2879-1",{"_key":32},"SUSE-SU-2016:2902-1",{"_key":34},"SUSE-SU-2016:2936-1",{"_key":36},"SUSE-SU-2016:2988-1",{"_key":38},"SUSE-SU-2016:3156-1",{"_key":40},"SUSE-SU-2016:3174-1",{"_key":42},"SUSE-SU-2016:3273-1",{"_key":44},"UBUNTU-CVE-2016-8909",{"_key":46},"USN-3125-1",{"_key":48},"DLA-1599-1",{"_key":50},"DLA-689-1",{"_key":52},"DLA-698-1",{"_key":54},"DEBIAN-CVE-2016-8909",{"_key":56},"RHSA-2017:2392",{"_key":58},"RHSA-2017:2408",[],[61,62,63,64,65,66,67,68,69],{"_key":26},{"_key":28},{"_key":30},{"_key":32},{"_key":34},{"_key":36},{"_key":38},{"_key":40},{"_key":42},"2016-11-04T21:00:00.000Z","2024-08-06T02:35:02.281Z","Modified",{"cisa_kev":74,"cisa_ransomware":74,"cisa_vendor":9,"epss_severity":75,"epss_score":76,"severity":77,"severity_score":78,"severity_version":79,"severity_source":80,"severity_vector":81,"severity_status":72},false,"low",0.00099,"medium",6,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",[83,91,97,102,107,112,116,120,124],{"url":84,"sources":85,"tags":87},"http://www.openwall.com/lists/oss-security/2016/10/24/4",[86,80],"cve.org",[88,89,90],"Mailing List","X Refsource MLIST","Third Party Advisory",{"url":92,"sources":93,"tags":94},"https://security.gentoo.org/glsa/201611-11",[86,80],[95,96,90],"Vendor Advisory","X Refsource GENTOO",{"url":98,"sources":99,"tags":100},"http://www.openwall.com/lists/oss-security/2016/10/24/1",[86,80],[88,89,101,90],"Patch",{"url":103,"sources":104,"tags":105},"https://access.redhat.com/errata/RHSA-2017:2392",[86,80],[95,106,90],"X Refsource REDHAT",{"url":108,"sources":109,"tags":110},"http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html",[86,80],[95,111,88,90],"X Refsource SUSE",{"url":113,"sources":114,"tags":115},"https://lists.gnu.org/archive/html/qemu-devel/2016-10/msg04682.html",[86,80],[88,89,101,90],{"url":117,"sources":118,"tags":119},"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html",[86,80],[88,89,90],{"url":121,"sources":122,"tags":123},"https://access.redhat.com/errata/RHSA-2017:2408",[86,80],[95,106,90],{"url":125,"sources":126,"tags":127},"http://www.securityfocus.com/bid/93842",[86,80],[128,129,90],"VDB Entry","X Refsource BID",[],{"date":132,"score":76,"percentile":133},"2026-06-04",0.26986,[135,139,142,145,148,151,154,157,160,163,166,169,172,174,177,180,183,186,189,192,195,198,201,204,207,210,213,216,219,222,224,227,230,232,234,236,239,242,245,248,251,254,257,260,263,266,269,272,275,278,281,284,287,290,293,296,299,302,305,308,311,313,316,319,321,324,327,329,332,334,336,339,342,344,347,350,353,356,359,362,366,369,372,375,378,381,384,387,389,392],{"date":136,"score":137,"percentile":138},"2025-11-04",0.00037,0.10566,{"date":140,"score":137,"percentile":141},"2025-11-05",0.10596,{"date":143,"score":137,"percentile":144},"2025-11-06",0.10706,{"date":146,"score":137,"percentile":147},"2025-11-07",0.10729,{"date":149,"score":137,"percentile":150},"2025-11-08",0.10738,{"date":152,"score":137,"percentile":153},"2025-11-09",0.10699,{"date":155,"score":137,"percentile":156},"2025-11-10",0.10661,{"date":158,"score":137,"percentile":159},"2025-11-11",0.10672,{"date":161,"score":137,"percentile":162},"2025-11-12",0.10703,{"date":164,"score":137,"percentile":165},"2025-11-13",0.10737,{"date":167,"score":137,"percentile":168},"2025-11-14",0.10745,{"date":170,"score":137,"percentile":171},"2025-11-15",0.10743,{"date":173,"score":137,"percentile":171},"2025-11-16",{"date":175,"score":137,"percentile":176},"2025-11-17",0.10726,{"date":178,"score":137,"percentile":179},"2025-11-18",0.06651,{"date":181,"score":137,"percentile":182},"2025-11-19",0.06663,{"date":184,"score":137,"percentile":185},"2025-11-20",0.06697,{"date":187,"score":137,"percentile":188},"2025-11-21",0.10754,{"date":190,"score":137,"percentile":191},"2025-11-22",0.1076,{"date":193,"score":137,"percentile":194},"2025-11-23",0.10725,{"date":196,"score":137,"percentile":197},"2025-11-24",0.10687,{"date":199,"score":137,"percentile":200},"2025-11-25",0.1069,{"date":202,"score":137,"percentile":203},"2025-11-26",0.10685,{"date":205,"score":137,"percentile":206},"2025-11-27",0.10693,{"date":208,"score":137,"percentile":209},"2025-11-28",0.10683,{"date":211,"score":137,"percentile":212},"2025-11-29",0.10668,{"date":214,"score":137,"percentile":215},"2025-11-30",0.10673,{"date":217,"score":137,"percentile":218},"2025-12-01",0.10716,{"date":220,"score":137,"percentile":221},"2025-12-02",0.10722,{"date":223,"score":137,"percentile":165},"2025-12-03",{"date":225,"score":137,"percentile":226},"2025-12-04",0.10711,{"date":228,"score":137,"percentile":229},"2025-12-05",0.10734,{"date":231,"score":137,"percentile":171},"2025-12-06",{"date":233,"score":137,"percentile":150},"2025-12-07",{"date":235,"score":137,"percentile":171},"2025-12-08",{"date":237,"score":137,"percentile":238},"2025-12-09",0.10793,{"date":240,"score":137,"percentile":241},"2025-12-10",0.10853,{"date":243,"score":137,"percentile":244},"2025-12-11",0.10884,{"date":246,"score":137,"percentile":247},"2025-12-12",0.10906,{"date":249,"score":137,"percentile":250},"2025-12-13",0.10911,{"date":252,"score":137,"percentile":253},"2025-12-14",0.10931,{"date":255,"score":137,"percentile":256},"2025-12-15",0.10874,{"date":258,"score":137,"percentile":259},"2025-12-16",0.10859,{"date":261,"score":137,"percentile":262},"2025-12-17",0.10938,{"date":264,"score":137,"percentile":265},"2025-12-18",0.10987,{"date":267,"score":137,"percentile":268},"2025-12-19",0.10998,{"date":270,"score":137,"percentile":271},"2025-12-20",0.10997,{"date":273,"score":137,"percentile":274},"2025-12-21",0.10976,{"date":276,"score":137,"percentile":277},"2025-12-22",0.10949,{"date":279,"score":137,"percentile":280},"2025-12-23",0.10939,{"date":282,"score":137,"percentile":283},"2025-12-24",0.10947,{"date":285,"score":137,"percentile":286},"2025-12-25",0.11025,{"date":288,"score":137,"percentile":289},"2025-12-26",0.11019,{"date":291,"score":137,"percentile":292},"2025-12-27",0.11031,{"date":294,"score":137,"percentile":295},"2025-12-28",0.11027,{"date":297,"score":137,"percentile":298},"2025-12-29",0.10991,{"date":300,"score":137,"percentile":301},"2025-12-30",0.10971,{"date":303,"score":137,"percentile":304},"2025-12-31",0.11017,{"date":306,"score":137,"percentile":307},"2026-01-01",0.1106,{"date":309,"score":137,"percentile":310},"2026-01-02",0.11058,{"date":312,"score":137,"percentile":286},"2026-01-03",{"date":314,"score":137,"percentile":315},"2026-01-04",0.10952,{"date":317,"score":137,"percentile":318},"2026-01-05",0.10909,{"date":320,"score":137,"percentile":247},"2026-01-06",{"date":322,"score":137,"percentile":323},"2026-01-07",0.10936,{"date":325,"score":137,"percentile":326},"2026-01-08",0.10989,{"date":328,"score":137,"percentile":298},"2026-01-09",{"date":330,"score":137,"percentile":331},"2026-01-10",0.11001,{"date":333,"score":137,"percentile":274},"2026-01-11",{"date":335,"score":137,"percentile":315},"2026-01-12",{"date":337,"score":137,"percentile":338},"2026-01-13",0.1093,{"date":340,"score":137,"percentile":341},"2026-01-14",0.10985,{"date":343,"score":137,"percentile":271},"2026-01-15",{"date":345,"score":137,"percentile":346},"2026-01-16",0.11038,{"date":348,"score":137,"percentile":349},"2026-01-17",0.1105,{"date":351,"score":137,"percentile":352},"2026-01-18",0.10999,{"date":354,"score":137,"percentile":355},"2026-01-19",0.10944,{"date":357,"score":137,"percentile":358},"2026-01-20",0.10925,{"date":360,"score":137,"percentile":361},"2026-01-21",0.10899,{"date":363,"score":364,"percentile":365},"2026-01-22",0.00038,0.11276,{"date":367,"score":364,"percentile":368},"2026-01-23",0.11365,{"date":370,"score":364,"percentile":371},"2026-01-24",0.11415,{"date":373,"score":364,"percentile":374},"2026-01-25",0.1137,{"date":376,"score":364,"percentile":377},"2026-01-26",0.11309,{"date":379,"score":364,"percentile":380},"2026-01-27",0.11293,{"date":382,"score":364,"percentile":383},"2026-01-28",0.11285,{"date":385,"score":364,"percentile":386},"2026-01-29",0.11261,{"date":388,"score":364,"percentile":383},"2026-01-30",{"date":390,"score":364,"percentile":391},"2026-01-31",0.11298,{"date":393,"score":364,"percentile":394},"2026-02-01",0.11294,[396],{"source":80,"cvss_v2_0":397,"cvss_v3_0":9,"cvss_v3_1":402,"cvss_v4_0":9},{"baseScore":398,"baseSeverity":9,"vectorString":399,"impactScore":400,"exploitabilityScore":401},2.1,"AV:L/AC:L/Au:N/C:N/I:N/A:P",2.9,3.9,{"baseScore":78,"baseSeverity":403,"vectorString":81,"impactScore":404,"exploitabilityScore":405},"MEDIUM",6.7,3.8,[407,416,422,431,447],{"ecosystem":9,"name":408,"vendor":409,"product":410,"cpe_part":411,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":412},"debian linux","debian","debian_linux","o",[413],{"version":414,"is_range":74,"range_type":415,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8.0","cpe",{"ecosystem":9,"name":417,"vendor":418,"product":417,"cpe_part":411,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":419},"leap","opensuse",[420],{"version":421,"is_range":74,"range_type":415,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"42.2",{"ecosystem":9,"name":423,"vendor":423,"product":423,"cpe_part":424,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":425},"qemu","a",[426],{"version":427,"is_range":428,"range_type":415,"version_start":9,"version_start_type":9,"version_end":429,"version_end_type":430,"fixed_in":9},"lte2.7.1",true,"2.7.1","including",{"ecosystem":9,"name":432,"vendor":433,"product":432,"cpe_part":424,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":434},"openstack","redhat",[435,437,439,441,443,445],{"version":436,"is_range":74,"range_type":415,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.0",{"version":438,"is_range":74,"range_type":415,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0",{"version":440,"is_range":74,"range_type":415,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8",{"version":442,"is_range":74,"range_type":415,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9",{"version":444,"is_range":74,"range_type":415,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10",{"version":446,"is_range":74,"range_type":415,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11",{"ecosystem":9,"name":448,"vendor":433,"product":448,"cpe_part":424,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":449},"virtualization",[450],{"version":451,"is_range":74,"range_type":415,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.0"]