ID CVE-2016-10214
Summary Memory leak in the virgl_resource_attach_backing function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands.
References
Vulnerable Configurations
  • cpe:2.3:a:virglrenderer_project:virglrenderer:0.5.0
    cpe:2.3:a:virglrenderer_project:virglrenderer:0.5.0
CVSS
Base: 4.9 (as of 22-03-2017 - 19:59)
Impact:
Exploitability:
CWE CWE-399
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
nessus via4
  • NASL family Gentoo Local Security Checks
    NASL id GENTOO_GLSA-201707-06.NASL
    description The remote host is affected by the vulnerability described in GLSA-201707-06 (virglrenderer: Multiple vulnerabilities) Multiple vulnerabilities have been discovered in virglrenderer. Please review the CVE identifiers referenced below for details. Impact : A local attacker could cause a Denial of Service condition. Workaround : There is no known workaround at this time.
    last seen 2017-10-29
    modified 2017-07-10
    plugin id 101337
    published 2017-07-10
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=101337
    title GLSA-201707-06 : virglrenderer: Multiple vulnerabilities
  • NASL family SuSE Local Security Checks
    NASL id SUSE_SU-2017-0798-1.NASL
    description This update for virglrenderer fixes the following issues: Security issues fixed : - CVE-2017-6386: memory leakage while in vrend_create_vertex_elements_state (bsc#1027376) - CVE-2017-6355: integer overflow while creating shader object (bsc#1027108) - CVE-2017-6317: fix memory leak in add shader program (bsc#1026922) - CVE-2017-6210: NULL pointer dereference in vrend_decode_reset (bsc#1026725) - CVE-2017-6209: stack buffer oveflow in parse_identifier (bsc#1026723) - CVE-2017-5994: out-of-bounds access in vrend_create_vertex_elements_state (bsc#1025507) - CVE-2017-5993: host memory leakage when initialising blitter context (bsc#1025505) - CVE-2017-5957: stack overflow in vrend_decode_set_framebuffer_state (bsc#1024993) - CVE-2017-5956: OOB access while in vrend_draw_vbo (bsc#1024992) - CVE-2017-5937: NULL pointer dereference in vrend_clear (bsc#1024232) - CVE-2017-5580: OOB access while parsing texture instruction (bsc#1021627) - CVE-2016-10214: host memory leak issue in virgl_resource_attach_backing (bsc#1024244) - CVE-2016-10163: host memory leakage when creating decode context (bsc#1021616) Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2017-10-29
    modified 2017-08-16
    plugin id 97913
    published 2017-03-23
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=97913
    title SUSE SLED12 / SLES12 Security Update : virglrenderer (SUSE-SU-2017:0798-1)
  • NASL family SuSE Local Security Checks
    NASL id OPENSUSE-2017-415.NASL
    description This update for virglrenderer fixes the following issues : Security issues fixed : - CVE-2017-6386: memory leakage while in vrend_create_vertex_elements_state (bsc#1027376) - CVE-2017-6355: integer overflow while creating shader object (bsc#1027108) - CVE-2017-6317: fix memory leak in add shader program (bsc#1026922) - CVE-2017-6210: NULL pointer dereference in vrend_decode_reset (bsc#1026725) - CVE-2017-6209: stack buffer oveflow in parse_identifier (bsc#1026723) - CVE-2017-5994: out-of-bounds access in vrend_create_vertex_elements_state (bsc#1025507) - CVE-2017-5993: host memory leakage when initialising blitter context (bsc#1025505) - CVE-2017-5957: stack overflow in vrend_decode_set_framebuffer_state (bsc#1024993) - CVE-2017-5956: OOB access while in vrend_draw_vbo (bsc#1024992) - CVE-2017-5937: NULL pointer dereference in vrend_clear (bsc#1024232) - CVE-2017-5580: OOB access while parsing texture instruction (bsc#1021627) - CVE-2016-10214: host memory leak issue in virgl_resource_attach_backing (bsc#1024244) - CVE-2016-10163: host memory leakage when creating decode context (bsc#1021616) This update was imported from the SUSE:SLE-12-SP2:Update update project.
    last seen 2017-10-29
    modified 2017-04-03
    plugin id 99153
    published 2017-04-03
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=99153
    title openSUSE Security Update : virglrenderer (openSUSE-2017-415)
refmap via4
bid 96181
confirm https://cgit.freedesktop.org/virglrenderer/commit/?id=40b0e7813325b08077b6f541b3989edb2d86d837
gentoo GLSA-201707-06
mlist
  • [oss-security] 20170208 Re: CVE request virglrenderer: host memory leak issue in virgl_resource_attach_backing
  • [virglrenderer-devel] 20170210 [ANNOUNCE] virglrenderer 0.6.0
Last major update 23-03-2017 - 06:48
Published 20-03-2017 - 12:59
Last modified 10-07-2017 - 21:33
Back to Top