PT-2017-7777 · Virgl+2 · Virglrenderer+2
Li Qiang
·
Publicado
2017-03-15
·
Atualizado
2017-07-11
·
CVE-2016-10163
CVSS v3.1
6.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
virglrenderer versions prior to 0.6.0
Description
The issue is related to a memory leak in the
vrend renderer context create internal function in vrend decode.c. This allows local guest OS users to cause a denial of service by repeatedly creating a decode context, resulting in host memory consumption.Recommendations
For versions prior to 0.6.0, update to version 0.6.0 or later to resolve the issue. As a temporary workaround, consider restricting the creation of decode contexts to minimize the risk of exploitation.
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Suse
Virglrenderer