PT-2017-16995 · Virgl+2 · Virglrenderer+2

Li Qiang · Publicado 2017-03-15 · Atualizado 2019-10-03 · CVE-2017-6317

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions virglrenderer versions prior to 0.6.0

Description The issue is related to a memory leak in the add shader program function, which can be exploited by local guest OS users to cause a denial of service through host memory consumption. This is achieved via vectors involving the sprog variable.

Recommendations For versions prior to 0.6.0, update to version 0.6.0 or later to resolve the issue.

Correção

DoS

Missing Release of Resource after Effective Lifetime

Enumeração de Fraquezas

CWE-772

Identificadores relacionados

ALT-PU-2017-1538

CVE-2017-6317

SUSE-SU-2017:0798-1

Produtos afetados

Alt Linux

Suse

Virglrenderer

Referências · 53

• https://bugzilla.suse.com/1024992 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5956 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6210 · Nota de Segurança
• https://suse.com/security/cve/CVE-2017-6355 · Nota
• https://suse.com/security/cve/CVE-2016-10163 · Nota
• https://cgit.freedesktop.org/virglrenderer/commit/?id=a2f12a1b0f95b13b6f8dc3d05d7b74b4386394e4 · Correção
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6209 · Nota de Segurança
• https://suse.com/security/cve/CVE-2017-6209 · Nota
• https://suse.com/security/cve/CVE-2017-5957 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5580 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2017-6317 · Nota de Segurança
• https://suse.com/security/cve/CVE-2016-10214 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5937 · Nota de Segurança
• https://bugzilla.suse.com/1021616 · Nota
• https://bugzilla.suse.com/1026725 · Nota