PT-2017-16813 · Virgl+2 · Virglrenderer+2
Li Qiang
·
Publicado
2017-03-15
·
Atualizado
2024-06-15
·
CVE-2017-5993
CVSS v3.1
6.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
virglrenderer versions prior to 0.6.0
Description
The issue is related to a memory leak in the
vrend renderer init blit ctx function, located in vrend blitter.c. This leak can be triggered by local guest OS users, allowing them to cause a denial of service by consuming host memory. The memory leak is exploited via a large number of VIRGL CCMD BLIT commands.Recommendations
For versions prior to 0.6.0, update to version 0.6.0 or later to resolve the issue. As a temporary workaround, consider restricting the number of
VIRGL CCMD BLIT commands to minimize the risk of exploitation.Correção
DoS
Missing Release of Resource after Effective Lifetime
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Suse
Virglrenderer