CVE-2017-5957 Stack-based buffer overflow in the vrend_decode_set_framebuffer_state function in vrend_decode.c in virglrenderer before 926b9b3460a48f6454d8bbe9e44313d86a65447f, as used in Quick Emulator (QEMU), all...
MediumCVSS 5.5
EPSS 0.39%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the vrend_decode_set_framebuffer_state function in vrend_decode.c in virglrenderer before 926b9b3460a48f6454d8bbe9e44313d86a65447f, as used in Quick Emulator (QEMU), allows a local guest users to cause a denial of service (application crash) via the "nr_cbufs" argument.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/virglrenderer(Debian:12) | < 0.6.0-1 | 0.6.0-1 |
| debian/virglrenderer(Debian:13) | < 0.6.0-1 | 0.6.0-1 |
| debian/virglrenderer(Debian:14) | < 0.6.0-1 | 0.6.0-1 |
| virglrenderer project virglrenderer | < 0.6.0 | 0.6.0 |
References
- Debian Security Tracker CVE-2017-5957 vendor-advisory
- [oss-security] 20170213 CVE-2017-5957 Virglrenderer: stack overflow in vrend_decode_set_framebuffer_state mailing-list patch third-party-advisory
- 96215 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking patch third-party-advisory vdb-entry
- cgit.freedesktop.org patch third-party-advisory
- GLSA-201707-06 third-party-advisory vendor-advisory
- bugs.debian.org issue-tracking