PT-2017-17018 · Virgl+1 · Virglrenderer+1

Li Qiang · Published 2017-03-10 · Updated 2017-07-11 · CVE-2017-6355

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions virglrenderer versions prior to 0.6.0

Description The issue is caused by an integer overflow in the vrend create shader function, which can be triggered by local guest OS users via crafted pkt length and offlen values. This results in an out-of-bounds access, leading to a denial of service (process crash).

Recommendations For versions prior to 0.6.0, update to version 0.6.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the vrend create shader function to minimize the risk of exploitation.

Fix

DoS

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2017-6355

SUSE-SU-2017:0798-1

Affected Products

Suse

Virglrenderer

References · 40

• https://osv.dev/vulnerability/DEBIAN-CVE-2017-6355 · Vendor Advisory
• https://security.gentoo.org/glsa/201707-06 · Vendor Advisory
• https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-6355 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:0798-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-6355 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-6355 · Security Note
• https://cve.org/CVERecord?id=CVE-2017-6355 · Security Note
• http://openwall.com/lists/oss-security/2017/02/27/3 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-6355 · Vendor Advisory
• https://cgit.freedesktop.org/virglrenderer/commit/?id=93761787b29f37fa627dea9082cdfc1a1ec608d6 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-6355 · Vendor Advisory
• https://bugzilla.suse.com/1026922 · Note
• https://suse.com/security/cve/CVE-2017-6386 · Note
• https://suse.com/support/update/announcement/2017/suse-su-20170798-1 · Note