The util_format_is_pure_uint function in vrend_renderer.c in Virgil 3d project (aka virglrenderer) 0.6.0 and earlier allows local guest OS users to cause a denial of service (NULL pointer dereference) via a crafted VIRGL_CCMD_CLEAR command.
References
| Link | Resource |
|---|---|
| http://www.openwall.com/lists/oss-security/2017/02/09/4 | Mailing List Patch Third Party Advisory |
| http://www.securityfocus.com/bid/96180 | Third Party Advisory VDB Entry |
| https://bugzilla.redhat.com/show_bug.cgi?id=1420246 | Issue Tracking Patch Third Party Advisory VDB Entry |
| https://cgit.freedesktop.org/virglrenderer/commit/?id=48f67f60967f963b698ec8df57ec6912a43d6282 | Patch Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2017/02/09/4 | Mailing List Patch Third Party Advisory |
| http://www.securityfocus.com/bid/96180 | Third Party Advisory VDB Entry |
| https://bugzilla.redhat.com/show_bug.cgi?id=1420246 | Issue Tracking Patch Third Party Advisory VDB Entry |
| https://cgit.freedesktop.org/virglrenderer/commit/?id=48f67f60967f963b698ec8df57ec6912a43d6282 | Patch Third Party Advisory |
Configurations
History
21 Nov 2024, 03:28
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.openwall.com/lists/oss-security/2017/02/09/4 - Mailing List, Patch, Third Party Advisory | |
| References | () http://www.securityfocus.com/bid/96180 - Third Party Advisory, VDB Entry | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=1420246 - Issue Tracking, Patch, Third Party Advisory, VDB Entry | |
| References | () https://cgit.freedesktop.org/virglrenderer/commit/?id=48f67f60967f963b698ec8df57ec6912a43d6282 - Patch, Third Party Advisory |
Information
Published : 2017-03-15 19:59
Updated : 2024-11-21 03:28
NVD link : CVE-2017-5937
Mitre link : CVE-2017-5937
CVE.ORG link : CVE-2017-5937
JSON object : View
Products Affected
virglrenderer_project
- virglrenderer
CWE
CWE-476
NULL Pointer Dereference