CVE-2017-5937

Опубликовано: 15 мар. 2017

Источник: nvd

CVSS3: 6.5

CVSS2: 2.1

EPSS Низкий

Описание

The util_format_is_pure_uint function in vrend_renderer.c in Virgil 3d project (aka virglrenderer) 0.6.0 and earlier allows local guest OS users to cause a denial of service (NULL pointer dereference) via a crafted VIRGL_CCMD_CLEAR command.

Ссылки

http://www.openwall.com/lists/oss-security/2017/02/09/4
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/96180
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1420246
Issue Tracking
Patch
Third Party Advisory
VDB Entry
https://cgit.freedesktop.org/virglrenderer/commit/?id=48f67f60967f963b698ec8df57ec6912a43d6282
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/02/09/4
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/96180
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1420246
Issue Tracking
Patch
Third Party Advisory
VDB Entry
https://cgit.freedesktop.org/virglrenderer/commit/?id=48f67f60967f963b698ec8df57ec6912a43d6282
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:virglrenderer_project:virglrenderer:*:*:*:*:*:*:*:*

Версия до 0.5.0 (включая)

EPSS

Процентиль: 26%

0.00091

Низкий

6.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2017-5937

CVSS3: 6.5

ubuntu

почти 9 лет назад

CVE-2017-5937

CVSS3: 6.5

debian

почти 9 лет назад

The util_format_is_pure_uint function in vrend_renderer.c in Virgil 3d ...

GHSA-g4qq-w8w3-624q

CVSS3: 6.5

github

больше 3 лет назад

openSUSE-SU-2017:0902-1

suse-cvrf

почти 9 лет назад

Security update for virglrenderer

SUSE-SU-2017:0798-1

suse-cvrf

почти 9 лет назад

Security update for virglrenderer

EPSS

Процентиль: 26%

0.00091

Низкий

6.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-476