csaf_suse - suse-su-2017:0798-1

Vulnerability from csaf_suse

Published

2017-03-22 14:57

Modified

2017-03-22 14:57

Summary

Security update for virglrenderer

Notes

Title of the patch

Security update for virglrenderer

Description of the patch

This update for virglrenderer fixes the following issues: Security issues fixed: - CVE-2017-6386: memory leakage while in vrend_create_vertex_elements_state (bsc#1027376) - CVE-2017-6355: integer overflow while creating shader object (bsc#1027108) - CVE-2017-6317: fix memory leak in add shader program (bsc#1026922) - CVE-2017-6210: null pointer dereference in vrend_decode_reset (bsc#1026725) - CVE-2017-6209: stack buffer oveflow in parse_identifier (bsc#1026723) - CVE-2017-5994: out-of-bounds access in vrend_create_vertex_elements_state (bsc#1025507) - CVE-2017-5993: host memory leakage when initialising blitter context (bsc#1025505) - CVE-2017-5957: stack overflow in vrend_decode_set_framebuffer_state (bsc#1024993) - CVE-2017-5956: OOB access while in vrend_draw_vbo (bsc#1024992) - CVE-2017-5937: null pointer dereference in vrend_clear (bsc#1024232) - CVE-2017-5580: OOB access while parsing texture instruction (bsc#1021627) - CVE-2016-10214: host memory leak issue in virgl_resource_attach_backing (bsc#1024244) - CVE-2016-10163: host memory leakage when creating decode context (bsc#1021616)

Patchnames

SUSE-SLE-DESKTOP-12-SP2-2017-452,SUSE-SLE-RPI-12-SP2-2017-452,SUSE-SLE-SDK-12-SP2-2017-452,SUSE-SLE-SERVER-12-SP2-2017-452

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "moderate",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for virglrenderer",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "\nThis update for virglrenderer fixes the following issues:\n\nSecurity issues fixed:\n- CVE-2017-6386: memory leakage while in vrend_create_vertex_elements_state (bsc#1027376)\n- CVE-2017-6355: integer overflow while creating shader object (bsc#1027108)\n- CVE-2017-6317: fix memory leak in add shader program (bsc#1026922)\n- CVE-2017-6210: null pointer dereference in vrend_decode_reset (bsc#1026725)\n- CVE-2017-6209: stack buffer oveflow in parse_identifier (bsc#1026723)\n- CVE-2017-5994: out-of-bounds access in vrend_create_vertex_elements_state (bsc#1025507)\n- CVE-2017-5993: host memory leakage when initialising blitter context (bsc#1025505)\n- CVE-2017-5957: stack overflow in vrend_decode_set_framebuffer_state (bsc#1024993)\n- CVE-2017-5956: OOB access while in vrend_draw_vbo (bsc#1024992)\n- CVE-2017-5937: null pointer dereference in vrend_clear (bsc#1024232)\n- CVE-2017-5580: OOB access while parsing texture instruction (bsc#1021627)\n- CVE-2016-10214: host memory leak issue in virgl_resource_attach_backing (bsc#1024244)\n- CVE-2016-10163: host memory leakage when creating decode context (bsc#1021616)\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-SLE-DESKTOP-12-SP2-2017-452,SUSE-SLE-RPI-12-SP2-2017-452,SUSE-SLE-SDK-12-SP2-2017-452,SUSE-SLE-SERVER-12-SP2-2017-452",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_0798-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2017:0798-1",
            url: "https://www.suse.com/support/update/announcement/2017/suse-su-20170798-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2017:0798-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2017-March/002738.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1021616",
            url: "https://bugzilla.suse.com/1021616",
         },
         {
            category: "self",
            summary: "SUSE Bug 1021627",
            url: "https://bugzilla.suse.com/1021627",
         },
         {
            category: "self",
            summary: "SUSE Bug 1024232",
            url: "https://bugzilla.suse.com/1024232",
         },
         {
            category: "self",
            summary: "SUSE Bug 1024244",
            url: "https://bugzilla.suse.com/1024244",
         },
         {
            category: "self",
            summary: "SUSE Bug 1024992",
            url: "https://bugzilla.suse.com/1024992",
         },
         {
            category: "self",
            summary: "SUSE Bug 1024993",
            url: "https://bugzilla.suse.com/1024993",
         },
         {
            category: "self",
            summary: "SUSE Bug 1025505",
            url: "https://bugzilla.suse.com/1025505",
         },
         {
            category: "self",
            summary: "SUSE Bug 1025507",
            url: "https://bugzilla.suse.com/1025507",
         },
         {
            category: "self",
            summary: "SUSE Bug 1026723",
            url: "https://bugzilla.suse.com/1026723",
         },
         {
            category: "self",
            summary: "SUSE Bug 1026725",
            url: "https://bugzilla.suse.com/1026725",
         },
         {
            category: "self",
            summary: "SUSE Bug 1026922",
            url: "https://bugzilla.suse.com/1026922",
         },
         {
            category: "self",
            summary: "SUSE Bug 1027108",
            url: "https://bugzilla.suse.com/1027108",
         },
         {
            category: "self",
            summary: "SUSE Bug 1027376",
            url: "https://bugzilla.suse.com/1027376",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-10163 page",
            url: "https://www.suse.com/security/cve/CVE-2016-10163/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-10214 page",
            url: "https://www.suse.com/security/cve/CVE-2016-10214/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-5580 page",
            url: "https://www.suse.com/security/cve/CVE-2017-5580/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-5937 page",
            url: "https://www.suse.com/security/cve/CVE-2017-5937/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-5956 page",
            url: "https://www.suse.com/security/cve/CVE-2017-5956/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-5957 page",
            url: "https://www.suse.com/security/cve/CVE-2017-5957/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-5993 page",
            url: "https://www.suse.com/security/cve/CVE-2017-5993/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-5994 page",
            url: "https://www.suse.com/security/cve/CVE-2017-5994/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-6209 page",
            url: "https://www.suse.com/security/cve/CVE-2017-6209/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-6210 page",
            url: "https://www.suse.com/security/cve/CVE-2017-6210/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-6317 page",
            url: "https://www.suse.com/security/cve/CVE-2017-6317/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-6355 page",
            url: "https://www.suse.com/security/cve/CVE-2017-6355/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-6386 page",
            url: "https://www.suse.com/security/cve/CVE-2017-6386/",
         },
      ],
      title: "Security update for virglrenderer",
      tracking: {
         current_release_date: "2017-03-22T14:57:19Z",
         generator: {
            date: "2017-03-22T14:57:19Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2017:0798-1",
         initial_release_date: "2017-03-22T14:57:19Z",
         revision_history: [
            {
               date: "2017-03-22T14:57:19Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libvirglrenderer0-0.5.0-11.1.aarch64",
                        product: {
                           name: "libvirglrenderer0-0.5.0-11.1.aarch64",
                           product_id: "libvirglrenderer0-0.5.0-11.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "virglrenderer-devel-0.5.0-11.1.aarch64",
                        product: {
                           name: "virglrenderer-devel-0.5.0-11.1.aarch64",
                           product_id: "virglrenderer-devel-0.5.0-11.1.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "virglrenderer-devel-0.5.0-11.1.ppc64le",
                        product: {
                           name: "virglrenderer-devel-0.5.0-11.1.ppc64le",
                           product_id: "virglrenderer-devel-0.5.0-11.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libvirglrenderer0-0.5.0-11.1.ppc64le",
                        product: {
                           name: "libvirglrenderer0-0.5.0-11.1.ppc64le",
                           product_id: "libvirglrenderer0-0.5.0-11.1.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "virglrenderer-devel-0.5.0-11.1.s390x",
                        product: {
                           name: "virglrenderer-devel-0.5.0-11.1.s390x",
                           product_id: "virglrenderer-devel-0.5.0-11.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libvirglrenderer0-0.5.0-11.1.s390x",
                        product: {
                           name: "libvirglrenderer0-0.5.0-11.1.s390x",
                           product_id: "libvirglrenderer0-0.5.0-11.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libvirglrenderer0-0.5.0-11.1.x86_64",
                        product: {
                           name: "libvirglrenderer0-0.5.0-11.1.x86_64",
                           product_id: "libvirglrenderer0-0.5.0-11.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "virglrenderer-devel-0.5.0-11.1.x86_64",
                        product: {
                           name: "virglrenderer-devel-0.5.0-11.1.x86_64",
                           product_id: "virglrenderer-devel-0.5.0-11.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Desktop 12 SP2",
                        product: {
                           name: "SUSE Linux Enterprise Desktop 12 SP2",
                           product_id: "SUSE Linux Enterprise Desktop 12 SP2",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sled:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                        product: {
                           name: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                           product_id: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Software Development Kit 12 SP2",
                        product: {
                           name: "SUSE Linux Enterprise Software Development Kit 12 SP2",
                           product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-sdk:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP2",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP2",
                           product_id: "SUSE Linux Enterprise Server 12 SP2",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12:sp2",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "libvirglrenderer0-0.5.0-11.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
               product_id: "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
            },
            product_reference: "libvirglrenderer0-0.5.0-11.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libvirglrenderer0-0.5.0-11.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
               product_id: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
            },
            product_reference: "libvirglrenderer0-0.5.0-11.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "virglrenderer-devel-0.5.0-11.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
            },
            product_reference: "virglrenderer-devel-0.5.0-11.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "virglrenderer-devel-0.5.0-11.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
            },
            product_reference: "virglrenderer-devel-0.5.0-11.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "virglrenderer-devel-0.5.0-11.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
            },
            product_reference: "virglrenderer-devel-0.5.0-11.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "virglrenderer-devel-0.5.0-11.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
            },
            product_reference: "virglrenderer-devel-0.5.0-11.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libvirglrenderer0-0.5.0-11.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
            },
            product_reference: "libvirglrenderer0-0.5.0-11.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libvirglrenderer0-0.5.0-11.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
            },
            product_reference: "libvirglrenderer0-0.5.0-11.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libvirglrenderer0-0.5.0-11.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
            },
            product_reference: "libvirglrenderer0-0.5.0-11.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libvirglrenderer0-0.5.0-11.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
            },
            product_reference: "libvirglrenderer0-0.5.0-11.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libvirglrenderer0-0.5.0-11.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
            },
            product_reference: "libvirglrenderer0-0.5.0-11.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libvirglrenderer0-0.5.0-11.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
            },
            product_reference: "libvirglrenderer0-0.5.0-11.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libvirglrenderer0-0.5.0-11.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
            },
            product_reference: "libvirglrenderer0-0.5.0-11.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libvirglrenderer0-0.5.0-11.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
            },
            product_reference: "libvirglrenderer0-0.5.0-11.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2016-10163",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-10163",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Memory leak in the vrend_renderer_context_create_internal function in vrend_decode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (host memory consumption) by repeatedly creating a decode context.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-10163",
               url: "https://www.suse.com/security/cve/CVE-2016-10163",
            },
            {
               category: "external",
               summary: "SUSE Bug 1021616 for CVE-2016-10163",
               url: "https://bugzilla.suse.com/1021616",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-03-22T14:57:19Z",
               details: "low",
            },
         ],
         title: "CVE-2016-10163",
      },
      {
         cve: "CVE-2016-10214",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-10214",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Memory leak in the virgl_resource_attach_backing function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-10214",
               url: "https://www.suse.com/security/cve/CVE-2016-10214",
            },
            {
               category: "external",
               summary: "SUSE Bug 1024244 for CVE-2016-10214",
               url: "https://bugzilla.suse.com/1024244",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-03-22T14:57:19Z",
               details: "moderate",
            },
         ],
         title: "CVE-2016-10214",
      },
      {
         cve: "CVE-2017-5580",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-5580",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The parse_instruction function in gallium/auxiliary/tgsi/tgsi_text.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and process crash) via a crafted texture instruction.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-5580",
               url: "https://www.suse.com/security/cve/CVE-2017-5580",
            },
            {
               category: "external",
               summary: "SUSE Bug 1021627 for CVE-2017-5580",
               url: "https://bugzilla.suse.com/1021627",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-03-22T14:57:19Z",
               details: "moderate",
            },
         ],
         title: "CVE-2017-5580",
      },
      {
         cve: "CVE-2017-5937",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-5937",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The util_format_is_pure_uint function in vrend_renderer.c in Virgil 3d project (aka virglrenderer) 0.6.0 and earlier allows local guest OS users to cause a denial of service (NULL pointer dereference) via a crafted VIRGL_CCMD_CLEAR command.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-5937",
               url: "https://www.suse.com/security/cve/CVE-2017-5937",
            },
            {
               category: "external",
               summary: "SUSE Bug 1024232 for CVE-2017-5937",
               url: "https://bugzilla.suse.com/1024232",
            },
            {
               category: "external",
               summary: "SUSE Bug 1041089 for CVE-2017-5937",
               url: "https://bugzilla.suse.com/1041089",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-03-22T14:57:19Z",
               details: "moderate",
            },
         ],
         title: "CVE-2017-5937",
      },
      {
         cve: "CVE-2017-5956",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-5956",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The vrend_draw_vbo function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors involving vertext_buffer_index.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-5956",
               url: "https://www.suse.com/security/cve/CVE-2017-5956",
            },
            {
               category: "external",
               summary: "SUSE Bug 1024992 for CVE-2017-5956",
               url: "https://bugzilla.suse.com/1024992",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-03-22T14:57:19Z",
               details: "moderate",
            },
         ],
         title: "CVE-2017-5956",
      },
      {
         cve: "CVE-2017-5957",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-5957",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Stack-based buffer overflow in the vrend_decode_set_framebuffer_state function in vrend_decode.c in virglrenderer before 926b9b3460a48f6454d8bbe9e44313d86a65447f, as used in Quick Emulator (QEMU), allows a local guest users to cause a denial of service (application crash) via the \"nr_cbufs\" argument.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-5957",
               url: "https://www.suse.com/security/cve/CVE-2017-5957",
            },
            {
               category: "external",
               summary: "SUSE Bug 1024993 for CVE-2017-5957",
               url: "https://bugzilla.suse.com/1024993",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-03-22T14:57:19Z",
               details: "moderate",
            },
         ],
         title: "CVE-2017-5957",
      },
      {
         cve: "CVE-2017-5993",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-5993",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Memory leak in the vrend_renderer_init_blit_ctx function in vrend_blitter.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRGL_CCMD_BLIT commands.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-5993",
               url: "https://www.suse.com/security/cve/CVE-2017-5993",
            },
            {
               category: "external",
               summary: "SUSE Bug 1025505 for CVE-2017-5993",
               url: "https://bugzilla.suse.com/1025505",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-03-22T14:57:19Z",
               details: "low",
            },
         ],
         title: "CVE-2017-5993",
      },
      {
         cve: "CVE-2017-5994",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-5994",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Heap-based buffer overflow in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and crash) via the num_elements parameter.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-5994",
               url: "https://www.suse.com/security/cve/CVE-2017-5994",
            },
            {
               category: "external",
               summary: "SUSE Bug 1025507 for CVE-2017-5994",
               url: "https://bugzilla.suse.com/1025507",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-03-22T14:57:19Z",
               details: "low",
            },
         ],
         title: "CVE-2017-5994",
      },
      {
         cve: "CVE-2017-6209",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-6209",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Stack-based buffer overflow in the parse_identifier function in tgsi_text.c in the TGSI auxiliary module in the Gallium driver in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors related to parsing properties.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-6209",
               url: "https://www.suse.com/security/cve/CVE-2017-6209",
            },
            {
               category: "external",
               summary: "SUSE Bug 1026723 for CVE-2017-6209",
               url: "https://bugzilla.suse.com/1026723",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-03-22T14:57:19Z",
               details: "moderate",
            },
         ],
         title: "CVE-2017-6209",
      },
      {
         cve: "CVE-2017-6210",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-6210",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The vrend_decode_reset function in vrend_decode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (NULL pointer dereference and QEMU process crash) by destroying context 0 (zero).",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-6210",
               url: "https://www.suse.com/security/cve/CVE-2017-6210",
            },
            {
               category: "external",
               summary: "SUSE Bug 1026725 for CVE-2017-6210",
               url: "https://bugzilla.suse.com/1026725",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-03-22T14:57:19Z",
               details: "moderate",
            },
         ],
         title: "CVE-2017-6210",
      },
      {
         cve: "CVE-2017-6317",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-6317",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Memory leak in the add_shader_program function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (host memory consumption) via vectors involving the sprog variable.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-6317",
               url: "https://www.suse.com/security/cve/CVE-2017-6317",
            },
            {
               category: "external",
               summary: "SUSE Bug 1026922 for CVE-2017-6317",
               url: "https://bugzilla.suse.com/1026922",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-03-22T14:57:19Z",
               details: "moderate",
            },
         ],
         title: "CVE-2017-6317",
      },
      {
         cve: "CVE-2017-6355",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-6355",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Integer overflow in the vrend_create_shader function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (process crash) via crafted pkt_length and offlen values, which trigger an out-of-bounds access.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-6355",
               url: "https://www.suse.com/security/cve/CVE-2017-6355",
            },
            {
               category: "external",
               summary: "SUSE Bug 1027108 for CVE-2017-6355",
               url: "https://bugzilla.suse.com/1027108",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-03-22T14:57:19Z",
               details: "moderate",
            },
         ],
         title: "CVE-2017-6355",
      },
      {
         cve: "CVE-2017-6386",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-6386",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Memory leak in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRGL_OBJECT_VERTEX_ELEMENTS commands.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-6386",
               url: "https://www.suse.com/security/cve/CVE-2017-6386",
            },
            {
               category: "external",
               summary: "SUSE Bug 1027376 for CVE-2017-6386",
               url: "https://bugzilla.suse.com/1027376",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvirglrenderer0-0.5.0-11.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP2:virglrenderer-devel-0.5.0-11.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-03-22T14:57:19Z",
               details: "low",
            },
         ],
         title: "CVE-2017-6386",
      },
   ],
}

cve-2017-6210

Vulnerability from cvelistv5

Published

2017-03-15 14:00

Modified

2024-08-05 15:25

Severity ?

Summary

The vrend_decode_reset function in vrend_decode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (NULL pointer dereference and QEMU process crash) by destroying context 0 (zero).

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=1426170	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201707-06	vendor-advisory, x_refsource_GENTOO
	https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/96439	vdb-entry, x_refsource_BID
	http://www.openwall.com/lists/oss-security/2017/02/23/21	mailing-list, x_refsource_MLIST
	https://cgit.freedesktop.org/virglrenderer/commit/?id=0a5dff15912207b83018485f83e067474e818bab	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T15:25:48.392Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1426170",
               },
               {
                  name: "GLSA-201707-06",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201707-06",
               },
               {
                  name: "[virglrenderer-devel] 20170210 [ANNOUNCE] virglrenderer 0.6.0",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
               },
               {
                  name: "96439",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/96439",
               },
               {
                  name: "[oss-security] 20170224 CVE-2017-6210 Virglrenderer: null pointer dereference in vrend_decode_reset",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2017/02/23/21",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=0a5dff15912207b83018485f83e067474e818bab",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-02-10T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The vrend_decode_reset function in vrend_decode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (NULL pointer dereference and QEMU process crash) by destroying context 0 (zero).",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-07-10T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1426170",
            },
            {
               name: "GLSA-201707-06",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201707-06",
            },
            {
               name: "[virglrenderer-devel] 20170210 [ANNOUNCE] virglrenderer 0.6.0",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
            },
            {
               name: "96439",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/96439",
            },
            {
               name: "[oss-security] 20170224 CVE-2017-6210 Virglrenderer: null pointer dereference in vrend_decode_reset",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2017/02/23/21",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=0a5dff15912207b83018485f83e067474e818bab",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-6210",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The vrend_decode_reset function in vrend_decode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (NULL pointer dereference and QEMU process crash) by destroying context 0 (zero).",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1426170",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1426170",
                  },
                  {
                     name: "GLSA-201707-06",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201707-06",
                  },
                  {
                     name: "[virglrenderer-devel] 20170210 [ANNOUNCE] virglrenderer 0.6.0",
                     refsource: "MLIST",
                     url: "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
                  },
                  {
                     name: "96439",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/96439",
                  },
                  {
                     name: "[oss-security] 20170224 CVE-2017-6210 Virglrenderer: null pointer dereference in vrend_decode_reset",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2017/02/23/21",
                  },
                  {
                     name: "https://cgit.freedesktop.org/virglrenderer/commit/?id=0a5dff15912207b83018485f83e067474e818bab",
                     refsource: "CONFIRM",
                     url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=0a5dff15912207b83018485f83e067474e818bab",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-6210",
      datePublished: "2017-03-15T14:00:00",
      dateReserved: "2017-02-23T00:00:00",
      dateUpdated: "2024-08-05T15:25:48.392Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-5994

Vulnerability from cvelistv5

Published

2017-03-15 14:00

Modified

2024-08-05 15:18

Severity ?

Summary

Heap-based buffer overflow in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and crash) via the num_elements parameter.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201707-06	vendor-advisory, x_refsource_GENTOO
	https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=1422452	x_refsource_CONFIRM
	https://cgit.freedesktop.org/virglrenderer/commit/?id=114688c526fe45f341d75ccd1d85473c3b08f7a7	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/96276	vdb-entry, x_refsource_BID
	http://www.openwall.com/lists/oss-security/2017/02/15/8	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T15:18:49.483Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201707-06",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201707-06",
               },
               {
                  name: "[virglrenderer-devel] 20170210 [ANNOUNCE] virglrenderer 0.6.0",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1422452",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=114688c526fe45f341d75ccd1d85473c3b08f7a7",
               },
               {
                  name: "96276",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/96276",
               },
               {
                  name: "[oss-security] 20170215 CVE-2017-5994 Virglrenderer: out-of-bounds access in vrend_create_vertex_elements_state",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2017/02/15/8",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-02-10T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Heap-based buffer overflow in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and crash) via the num_elements parameter.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-07-10T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201707-06",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201707-06",
            },
            {
               name: "[virglrenderer-devel] 20170210 [ANNOUNCE] virglrenderer 0.6.0",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1422452",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=114688c526fe45f341d75ccd1d85473c3b08f7a7",
            },
            {
               name: "96276",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/96276",
            },
            {
               name: "[oss-security] 20170215 CVE-2017-5994 Virglrenderer: out-of-bounds access in vrend_create_vertex_elements_state",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2017/02/15/8",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-5994",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Heap-based buffer overflow in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and crash) via the num_elements parameter.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201707-06",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201707-06",
                  },
                  {
                     name: "[virglrenderer-devel] 20170210 [ANNOUNCE] virglrenderer 0.6.0",
                     refsource: "MLIST",
                     url: "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1422452",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1422452",
                  },
                  {
                     name: "https://cgit.freedesktop.org/virglrenderer/commit/?id=114688c526fe45f341d75ccd1d85473c3b08f7a7",
                     refsource: "CONFIRM",
                     url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=114688c526fe45f341d75ccd1d85473c3b08f7a7",
                  },
                  {
                     name: "96276",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/96276",
                  },
                  {
                     name: "[oss-security] 20170215 CVE-2017-5994 Virglrenderer: out-of-bounds access in vrend_create_vertex_elements_state",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2017/02/15/8",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-5994",
      datePublished: "2017-03-15T14:00:00",
      dateReserved: "2017-02-15T00:00:00",
      dateUpdated: "2024-08-05T15:18:49.483Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-5937

Vulnerability from cvelistv5

Published

2017-03-15 19:00

Modified

2024-08-05 15:18

Severity ?

Summary

The util_format_is_pure_uint function in vrend_renderer.c in Virgil 3d project (aka virglrenderer) 0.6.0 and earlier allows local guest OS users to cause a denial of service (NULL pointer dereference) via a crafted VIRGL_CCMD_CLEAR command.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=1420246	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/96180	vdb-entry, x_refsource_BID
	http://www.openwall.com/lists/oss-security/2017/02/09/4	mailing-list, x_refsource_MLIST
	https://cgit.freedesktop.org/virglrenderer/commit/?id=48f67f60967f963b698ec8df57ec6912a43d6282	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T15:18:48.931Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1420246",
               },
               {
                  name: "96180",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/96180",
               },
               {
                  name: "[oss-security] 20170208 Re: CVE request virglrenderer: null pointer dereference in vrend_clear",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2017/02/09/4",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=48f67f60967f963b698ec8df57ec6912a43d6282",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-02-08T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The util_format_is_pure_uint function in vrend_renderer.c in Virgil 3d project (aka virglrenderer) 0.6.0 and earlier allows local guest OS users to cause a denial of service (NULL pointer dereference) via a crafted VIRGL_CCMD_CLEAR command.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-03-15T18:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1420246",
            },
            {
               name: "96180",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/96180",
            },
            {
               name: "[oss-security] 20170208 Re: CVE request virglrenderer: null pointer dereference in vrend_clear",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2017/02/09/4",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=48f67f60967f963b698ec8df57ec6912a43d6282",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2017-5937",
      datePublished: "2017-03-15T19:00:00",
      dateReserved: "2017-02-08T00:00:00",
      dateUpdated: "2024-08-05T15:18:48.931Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2016-10214

Vulnerability from cvelistv5

Published

2017-03-20 16:00

Modified

2024-08-06 03:14

Severity ?

Summary

Memory leak in the virgl_resource_attach_backing function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201707-06	vendor-advisory, x_refsource_GENTOO
	https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html	mailing-list, x_refsource_MLIST
	https://cgit.freedesktop.org/virglrenderer/commit/?id=40b0e7813325b08077b6f541b3989edb2d86d837	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/96181	vdb-entry, x_refsource_BID
	http://www.openwall.com/lists/oss-security/2017/02/09/5	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T03:14:42.879Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201707-06",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201707-06",
               },
               {
                  name: "[virglrenderer-devel] 20170210 [ANNOUNCE] virglrenderer 0.6.0",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=40b0e7813325b08077b6f541b3989edb2d86d837",
               },
               {
                  name: "96181",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/96181",
               },
               {
                  name: "[oss-security] 20170208 Re: CVE request virglrenderer: host memory leak issue in virgl_resource_attach_backing",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2017/02/09/5",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-02-08T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Memory leak in the virgl_resource_attach_backing function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-07-10T09:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "GLSA-201707-06",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201707-06",
            },
            {
               name: "[virglrenderer-devel] 20170210 [ANNOUNCE] virglrenderer 0.6.0",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=40b0e7813325b08077b6f541b3989edb2d86d837",
            },
            {
               name: "96181",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/96181",
            },
            {
               name: "[oss-security] 20170208 Re: CVE request virglrenderer: host memory leak issue in virgl_resource_attach_backing",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2017/02/09/5",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2016-10214",
      datePublished: "2017-03-20T16:00:00",
      dateReserved: "2017-02-08T00:00:00",
      dateUpdated: "2024-08-06T03:14:42.879Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-5957

Vulnerability from cvelistv5

Published

2017-03-14 14:00

Modified

2024-08-05 15:18

Severity ?

Summary

Stack-based buffer overflow in the vrend_decode_set_framebuffer_state function in vrend_decode.c in virglrenderer before 926b9b3460a48f6454d8bbe9e44313d86a65447f, as used in Quick Emulator (QEMU), allows a local guest users to cause a denial of service (application crash) via the "nr_cbufs" argument.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201707-06	vendor-advisory, x_refsource_GENTOO
	https://cgit.freedesktop.org/virglrenderer/commit/?id=926b9b3460a48f6454d8bbe9e44313d86a65447f	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/96215	vdb-entry, x_refsource_BID
	http://www.openwall.com/lists/oss-security/2017/02/13/3	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=1421126	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T15:18:49.356Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201707-06",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201707-06",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=926b9b3460a48f6454d8bbe9e44313d86a65447f",
               },
               {
                  name: "96215",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/96215",
               },
               {
                  name: "[oss-security] 20170213 CVE-2017-5957 Virglrenderer: stack overflow in vrend_decode_set_framebuffer_state",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2017/02/13/3",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1421126",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-02-13T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Stack-based buffer overflow in the vrend_decode_set_framebuffer_state function in vrend_decode.c in virglrenderer before 926b9b3460a48f6454d8bbe9e44313d86a65447f, as used in Quick Emulator (QEMU), allows a local guest users to cause a denial of service (application crash) via the \"nr_cbufs\" argument.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-07-10T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201707-06",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201707-06",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=926b9b3460a48f6454d8bbe9e44313d86a65447f",
            },
            {
               name: "96215",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/96215",
            },
            {
               name: "[oss-security] 20170213 CVE-2017-5957 Virglrenderer: stack overflow in vrend_decode_set_framebuffer_state",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2017/02/13/3",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1421126",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-5957",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Stack-based buffer overflow in the vrend_decode_set_framebuffer_state function in vrend_decode.c in virglrenderer before 926b9b3460a48f6454d8bbe9e44313d86a65447f, as used in Quick Emulator (QEMU), allows a local guest users to cause a denial of service (application crash) via the \"nr_cbufs\" argument.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201707-06",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201707-06",
                  },
                  {
                     name: "https://cgit.freedesktop.org/virglrenderer/commit/?id=926b9b3460a48f6454d8bbe9e44313d86a65447f",
                     refsource: "CONFIRM",
                     url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=926b9b3460a48f6454d8bbe9e44313d86a65447f",
                  },
                  {
                     name: "96215",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/96215",
                  },
                  {
                     name: "[oss-security] 20170213 CVE-2017-5957 Virglrenderer: stack overflow in vrend_decode_set_framebuffer_state",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2017/02/13/3",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1421126",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1421126",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-5957",
      datePublished: "2017-03-14T14:00:00",
      dateReserved: "2017-02-10T00:00:00",
      dateUpdated: "2024-08-05T15:18:49.356Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-5956

Vulnerability from cvelistv5

Published

2017-03-20 16:00

Modified

2024-08-05 15:18

Severity ?

Summary

The vrend_draw_vbo function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors involving vertext_buffer_index.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201707-06	vendor-advisory, x_refsource_GENTOO
	https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/96187	vdb-entry, x_refsource_BID
	https://cgit.freedesktop.org/virglrenderer/commit/?id=a5ac49940c40ae415eac0cf912eac7070b4ba95d	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2017/02/13/2	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T15:18:49.455Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201707-06",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201707-06",
               },
               {
                  name: "[virglrenderer-devel] 20170210 [ANNOUNCE] virglrenderer 0.6.0",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
               },
               {
                  name: "96187",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/96187",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=a5ac49940c40ae415eac0cf912eac7070b4ba95d",
               },
               {
                  name: "[oss-security] 20170213 CVE-2017-5956 virglrenderer: Virglrenderer: OOB access while in vrend_draw_vbo",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2017/02/13/2",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-02-10T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The vrend_draw_vbo function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors involving vertext_buffer_index.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-07-10T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201707-06",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201707-06",
            },
            {
               name: "[virglrenderer-devel] 20170210 [ANNOUNCE] virglrenderer 0.6.0",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
            },
            {
               name: "96187",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/96187",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=a5ac49940c40ae415eac0cf912eac7070b4ba95d",
            },
            {
               name: "[oss-security] 20170213 CVE-2017-5956 virglrenderer: Virglrenderer: OOB access while in vrend_draw_vbo",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2017/02/13/2",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-5956",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The vrend_draw_vbo function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors involving vertext_buffer_index.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201707-06",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201707-06",
                  },
                  {
                     name: "[virglrenderer-devel] 20170210 [ANNOUNCE] virglrenderer 0.6.0",
                     refsource: "MLIST",
                     url: "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
                  },
                  {
                     name: "96187",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/96187",
                  },
                  {
                     name: "https://cgit.freedesktop.org/virglrenderer/commit/?id=a5ac49940c40ae415eac0cf912eac7070b4ba95d",
                     refsource: "CONFIRM",
                     url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=a5ac49940c40ae415eac0cf912eac7070b4ba95d",
                  },
                  {
                     name: "[oss-security] 20170213 CVE-2017-5956 virglrenderer: Virglrenderer: OOB access while in vrend_draw_vbo",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2017/02/13/2",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-5956",
      datePublished: "2017-03-20T16:00:00",
      dateReserved: "2017-02-10T00:00:00",
      dateUpdated: "2024-08-05T15:18:49.455Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-5993

Vulnerability from cvelistv5

Published

2017-03-15 14:00

Modified

2024-08-05 15:18

Severity ?

Summary

Memory leak in the vrend_renderer_init_blit_ctx function in vrend_blitter.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRGL_CCMD_BLIT commands.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201707-06	vendor-advisory, x_refsource_GENTOO
	https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2017/02/15/7	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/96275	vdb-entry, x_refsource_BID
	https://bugzilla.redhat.com/show_bug.cgi?id=1422438	x_refsource_CONFIRM
	https://cgit.freedesktop.org/virglrenderer/commit/?id=6eb13f7a2dcf391ec9e19b4c2a79e68305f63c22	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T15:18:49.378Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201707-06",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201707-06",
               },
               {
                  name: "[virglrenderer-devel] 20170210 [ANNOUNCE] virglrenderer 0.6.0",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
               },
               {
                  name: "[oss-security] 20170215 CVE-2017-5993 Virglrenderer: host memory leakage when initialising blitter context",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2017/02/15/7",
               },
               {
                  name: "96275",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/96275",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1422438",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=6eb13f7a2dcf391ec9e19b4c2a79e68305f63c22",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-02-10T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Memory leak in the vrend_renderer_init_blit_ctx function in vrend_blitter.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRGL_CCMD_BLIT commands.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-07-10T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201707-06",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201707-06",
            },
            {
               name: "[virglrenderer-devel] 20170210 [ANNOUNCE] virglrenderer 0.6.0",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
            },
            {
               name: "[oss-security] 20170215 CVE-2017-5993 Virglrenderer: host memory leakage when initialising blitter context",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2017/02/15/7",
            },
            {
               name: "96275",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/96275",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1422438",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=6eb13f7a2dcf391ec9e19b4c2a79e68305f63c22",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-5993",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Memory leak in the vrend_renderer_init_blit_ctx function in vrend_blitter.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRGL_CCMD_BLIT commands.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201707-06",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201707-06",
                  },
                  {
                     name: "[virglrenderer-devel] 20170210 [ANNOUNCE] virglrenderer 0.6.0",
                     refsource: "MLIST",
                     url: "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
                  },
                  {
                     name: "[oss-security] 20170215 CVE-2017-5993 Virglrenderer: host memory leakage when initialising blitter context",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2017/02/15/7",
                  },
                  {
                     name: "96275",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/96275",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1422438",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1422438",
                  },
                  {
                     name: "https://cgit.freedesktop.org/virglrenderer/commit/?id=6eb13f7a2dcf391ec9e19b4c2a79e68305f63c22",
                     refsource: "CONFIRM",
                     url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=6eb13f7a2dcf391ec9e19b4c2a79e68305f63c22",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-5993",
      datePublished: "2017-03-15T14:00:00",
      dateReserved: "2017-02-15T00:00:00",
      dateUpdated: "2024-08-05T15:18:49.378Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-6317

Vulnerability from cvelistv5

Published

2017-03-15 14:00

Modified

2024-08-05 15:25

Severity ?

Summary

Memory leak in the add_shader_program function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (host memory consumption) via vectors involving the sprog variable.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201707-06	vendor-advisory, x_refsource_GENTOO
	https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2017/02/24/5	mailing-list, x_refsource_MLIST
	https://cgit.freedesktop.org/virglrenderer/commit/?id=a2f12a1b0f95b13b6f8dc3d05d7b74b4386394e4	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=1426756	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/96450	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T15:25:49.008Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201707-06",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201707-06",
               },
               {
                  name: "[virglrenderer-devel] 20170210 [ANNOUNCE] virglrenderer 0.6.0",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
               },
               {
                  name: "[oss-security] 20170225 CVE-2017-6317 Virglrenderer: memory leakage issue in add_shader_program",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2017/02/24/5",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=a2f12a1b0f95b13b6f8dc3d05d7b74b4386394e4",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1426756",
               },
               {
                  name: "96450",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/96450",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-02-10T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Memory leak in the add_shader_program function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (host memory consumption) via vectors involving the sprog variable.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-07-10T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201707-06",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201707-06",
            },
            {
               name: "[virglrenderer-devel] 20170210 [ANNOUNCE] virglrenderer 0.6.0",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
            },
            {
               name: "[oss-security] 20170225 CVE-2017-6317 Virglrenderer: memory leakage issue in add_shader_program",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2017/02/24/5",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=a2f12a1b0f95b13b6f8dc3d05d7b74b4386394e4",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1426756",
            },
            {
               name: "96450",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/96450",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-6317",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Memory leak in the add_shader_program function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (host memory consumption) via vectors involving the sprog variable.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201707-06",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201707-06",
                  },
                  {
                     name: "[virglrenderer-devel] 20170210 [ANNOUNCE] virglrenderer 0.6.0",
                     refsource: "MLIST",
                     url: "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
                  },
                  {
                     name: "[oss-security] 20170225 CVE-2017-6317 Virglrenderer: memory leakage issue in add_shader_program",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2017/02/24/5",
                  },
                  {
                     name: "https://cgit.freedesktop.org/virglrenderer/commit/?id=a2f12a1b0f95b13b6f8dc3d05d7b74b4386394e4",
                     refsource: "CONFIRM",
                     url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=a2f12a1b0f95b13b6f8dc3d05d7b74b4386394e4",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1426756",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1426756",
                  },
                  {
                     name: "96450",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/96450",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-6317",
      datePublished: "2017-03-15T14:00:00",
      dateReserved: "2017-02-24T00:00:00",
      dateUpdated: "2024-08-05T15:25:49.008Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-6386

Vulnerability from cvelistv5

Published

2017-03-15 14:00

Modified

2024-08-05 15:25

Severity ?

Summary

Memory leak in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRGL_OBJECT_VERTEX_ELEMENTS commands.

References

▼	URL	Tags
	http://www.openwall.com/lists/oss-security/2017/03/01/7	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201707-06	vendor-advisory, x_refsource_GENTOO
	https://cgit.freedesktop.org/virglrenderer/commit/?id=737c3350850ca4dbc5633b3bdb4118176ce59920	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/96506	vdb-entry, x_refsource_BID
	https://bugzilla.redhat.com/show_bug.cgi?id=1427472	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T15:25:49.235Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "[oss-security] 20170301 CVE-2017-6386 Virglrenderer: memory leakage while in vrend_create_vertex_elements_state",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2017/03/01/7",
               },
               {
                  name: "GLSA-201707-06",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201707-06",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=737c3350850ca4dbc5633b3bdb4118176ce59920",
               },
               {
                  name: "96506",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/96506",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1427472",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-03-01T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Memory leak in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRGL_OBJECT_VERTEX_ELEMENTS commands.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-07-10T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "[oss-security] 20170301 CVE-2017-6386 Virglrenderer: memory leakage while in vrend_create_vertex_elements_state",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2017/03/01/7",
            },
            {
               name: "GLSA-201707-06",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201707-06",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=737c3350850ca4dbc5633b3bdb4118176ce59920",
            },
            {
               name: "96506",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/96506",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1427472",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-6386",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Memory leak in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRGL_OBJECT_VERTEX_ELEMENTS commands.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "[oss-security] 20170301 CVE-2017-6386 Virglrenderer: memory leakage while in vrend_create_vertex_elements_state",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2017/03/01/7",
                  },
                  {
                     name: "GLSA-201707-06",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201707-06",
                  },
                  {
                     name: "https://cgit.freedesktop.org/virglrenderer/commit/?id=737c3350850ca4dbc5633b3bdb4118176ce59920",
                     refsource: "CONFIRM",
                     url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=737c3350850ca4dbc5633b3bdb4118176ce59920",
                  },
                  {
                     name: "96506",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/96506",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1427472",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1427472",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-6386",
      datePublished: "2017-03-15T14:00:00",
      dateReserved: "2017-02-28T00:00:00",
      dateUpdated: "2024-08-05T15:25:49.235Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-6355

Vulnerability from cvelistv5

Published

2017-03-10 02:00

Modified

2024-08-05 15:25

Severity ?

Summary

Integer overflow in the vrend_create_shader function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (process crash) via crafted pkt_length and offlen values, which trigger an out-of-bounds access.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/96460	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201707-06	vendor-advisory, x_refsource_GENTOO
	https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2017/02/27/3	mailing-list, x_refsource_MLIST
	https://cgit.freedesktop.org/virglrenderer/commit/?id=93761787b29f37fa627dea9082cdfc1a1ec608d6	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T15:25:49.166Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "96460",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/96460",
               },
               {
                  name: "GLSA-201707-06",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201707-06",
               },
               {
                  name: "[virglrenderer-devel] 20170210 [ANNOUNCE] virglrenderer 0.6.0",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
               },
               {
                  name: "[oss-security] 20170227 CVE-2017-6355 Virglrenderer: integer overflow while creating shader object",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2017/02/27/3",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=93761787b29f37fa627dea9082cdfc1a1ec608d6",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-02-10T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Integer overflow in the vrend_create_shader function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (process crash) via crafted pkt_length and offlen values, which trigger an out-of-bounds access.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-07-10T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "96460",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/96460",
            },
            {
               name: "GLSA-201707-06",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201707-06",
            },
            {
               name: "[virglrenderer-devel] 20170210 [ANNOUNCE] virglrenderer 0.6.0",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
            },
            {
               name: "[oss-security] 20170227 CVE-2017-6355 Virglrenderer: integer overflow while creating shader object",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2017/02/27/3",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=93761787b29f37fa627dea9082cdfc1a1ec608d6",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-6355",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Integer overflow in the vrend_create_shader function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (process crash) via crafted pkt_length and offlen values, which trigger an out-of-bounds access.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "96460",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/96460",
                  },
                  {
                     name: "GLSA-201707-06",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201707-06",
                  },
                  {
                     name: "[virglrenderer-devel] 20170210 [ANNOUNCE] virglrenderer 0.6.0",
                     refsource: "MLIST",
                     url: "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
                  },
                  {
                     name: "[oss-security] 20170227 CVE-2017-6355 Virglrenderer: integer overflow while creating shader object",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2017/02/27/3",
                  },
                  {
                     name: "https://cgit.freedesktop.org/virglrenderer/commit/?id=93761787b29f37fa627dea9082cdfc1a1ec608d6",
                     refsource: "CONFIRM",
                     url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=93761787b29f37fa627dea9082cdfc1a1ec608d6",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-6355",
      datePublished: "2017-03-10T02:00:00",
      dateReserved: "2017-02-27T00:00:00",
      dateUpdated: "2024-08-05T15:25:49.166Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2016-10163

Vulnerability from cvelistv5

Published

2017-03-15 15:00

Modified

2024-08-06 03:14

Severity ?

Summary

Memory leak in the vrend_renderer_context_create_internal function in vrend_decode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (host memory consumption) by repeatedly creating a decode context.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201707-06	vendor-advisory, x_refsource_GENTOO
	https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2017/01/24/2	mailing-list, x_refsource_MLIST
	https://cgit.freedesktop.org/virglrenderer/commit/?id=747a293ff6055203e529f083896b823e22523fe7	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2017/01/25/4	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/95784	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T03:14:42.391Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201707-06",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201707-06",
               },
               {
                  name: "[virglrenderer-devel] 20170210 [ANNOUNCE] virglrenderer 0.6.0",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
               },
               {
                  name: "[oss-security] 20170124 CVE request Virglrenderer: host memory leakage when creating decode context",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2017/01/24/2",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=747a293ff6055203e529f083896b823e22523fe7",
               },
               {
                  name: "[oss-security] 20170125 Re: CVE request Virglrenderer: host memory leakage when creating decode context",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2017/01/25/4",
               },
               {
                  name: "95784",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/95784",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-01-24T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Memory leak in the vrend_renderer_context_create_internal function in vrend_decode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (host memory consumption) by repeatedly creating a decode context.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-07-10T09:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "GLSA-201707-06",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201707-06",
            },
            {
               name: "[virglrenderer-devel] 20170210 [ANNOUNCE] virglrenderer 0.6.0",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
            },
            {
               name: "[oss-security] 20170124 CVE request Virglrenderer: host memory leakage when creating decode context",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2017/01/24/2",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=747a293ff6055203e529f083896b823e22523fe7",
            },
            {
               name: "[oss-security] 20170125 Re: CVE request Virglrenderer: host memory leakage when creating decode context",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2017/01/25/4",
            },
            {
               name: "95784",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/95784",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2016-10163",
      datePublished: "2017-03-15T15:00:00",
      dateReserved: "2017-01-25T00:00:00",
      dateUpdated: "2024-08-06T03:14:42.391Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-5580

Vulnerability from cvelistv5

Published

2017-03-15 15:00

Modified

2024-08-05 15:04

Severity ?

Summary

The parse_instruction function in gallium/auxiliary/tgsi/tgsi_text.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and process crash) via a crafted texture instruction.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201707-06	vendor-advisory, x_refsource_GENTOO
	https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html	mailing-list, x_refsource_MLIST
	https://cgit.freedesktop.org/virglrenderer/commit/src/gallium/auxiliary/tgsi/tgsi_text.c?id=28894a30a17a84529be102b21118e55d6c9f23fa	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/95782	vdb-entry, x_refsource_BID
	http://www.openwall.com/lists/oss-security/2017/01/24/5	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2017/01/25/5	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T15:04:15.316Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201707-06",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201707-06",
               },
               {
                  name: "[virglrenderer-devel] 20170210 [ANNOUNCE] virglrenderer 0.6.0",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cgit.freedesktop.org/virglrenderer/commit/src/gallium/auxiliary/tgsi/tgsi_text.c?id=28894a30a17a84529be102b21118e55d6c9f23fa",
               },
               {
                  name: "95782",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/95782",
               },
               {
                  name: "[oss-security] 20170124 CVE request Virglrenderer: OOB access while parsing texture instruction",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2017/01/24/5",
               },
               {
                  name: "[oss-security] 20170125 Re: CVE request Virglrenderer: OOB access while parsing texture instruction",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2017/01/25/5",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-01-24T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The parse_instruction function in gallium/auxiliary/tgsi/tgsi_text.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and process crash) via a crafted texture instruction.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-07-10T09:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "GLSA-201707-06",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201707-06",
            },
            {
               name: "[virglrenderer-devel] 20170210 [ANNOUNCE] virglrenderer 0.6.0",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cgit.freedesktop.org/virglrenderer/commit/src/gallium/auxiliary/tgsi/tgsi_text.c?id=28894a30a17a84529be102b21118e55d6c9f23fa",
            },
            {
               name: "95782",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/95782",
            },
            {
               name: "[oss-security] 20170124 CVE request Virglrenderer: OOB access while parsing texture instruction",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2017/01/24/5",
            },
            {
               name: "[oss-security] 20170125 Re: CVE request Virglrenderer: OOB access while parsing texture instruction",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2017/01/25/5",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2017-5580",
      datePublished: "2017-03-15T15:00:00",
      dateReserved: "2017-01-25T00:00:00",
      dateUpdated: "2024-08-05T15:04:15.316Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-6209

Vulnerability from cvelistv5

Published

2017-03-15 14:00

Modified

2024-08-05 15:25

Severity ?

Summary

Stack-based buffer overflow in the parse_identifier function in tgsi_text.c in the TGSI auxiliary module in the Gallium driver in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors related to parsing properties.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201707-06	vendor-advisory, x_refsource_GENTOO
	https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html	mailing-list, x_refsource_MLIST
	https://cgit.freedesktop.org/virglrenderer/commit/?id=e534b51ca3c3cd25f3990589932a9ed711c59b27	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/96437	vdb-entry, x_refsource_BID
	http://www.openwall.com/lists/oss-security/2017/02/23/20	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=1426149	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T15:25:48.535Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201707-06",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201707-06",
               },
               {
                  name: "[virglrenderer-devel] 20170210 [ANNOUNCE] virglrenderer 0.6.0",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=e534b51ca3c3cd25f3990589932a9ed711c59b27",
               },
               {
                  name: "96437",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/96437",
               },
               {
                  name: "[oss-security] 20170224 CVE-2017-6209 Virglrenderer: stack buffer oveflow in parse_identifier",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2017/02/23/20",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1426149",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-02-10T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Stack-based buffer overflow in the parse_identifier function in tgsi_text.c in the TGSI auxiliary module in the Gallium driver in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors related to parsing properties.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-07-10T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201707-06",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201707-06",
            },
            {
               name: "[virglrenderer-devel] 20170210 [ANNOUNCE] virglrenderer 0.6.0",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=e534b51ca3c3cd25f3990589932a9ed711c59b27",
            },
            {
               name: "96437",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/96437",
            },
            {
               name: "[oss-security] 20170224 CVE-2017-6209 Virglrenderer: stack buffer oveflow in parse_identifier",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2017/02/23/20",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1426149",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-6209",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Stack-based buffer overflow in the parse_identifier function in tgsi_text.c in the TGSI auxiliary module in the Gallium driver in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors related to parsing properties.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201707-06",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201707-06",
                  },
                  {
                     name: "[virglrenderer-devel] 20170210 [ANNOUNCE] virglrenderer 0.6.0",
                     refsource: "MLIST",
                     url: "https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html",
                  },
                  {
                     name: "https://cgit.freedesktop.org/virglrenderer/commit/?id=e534b51ca3c3cd25f3990589932a9ed711c59b27",
                     refsource: "CONFIRM",
                     url: "https://cgit.freedesktop.org/virglrenderer/commit/?id=e534b51ca3c3cd25f3990589932a9ed711c59b27",
                  },
                  {
                     name: "96437",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/96437",
                  },
                  {
                     name: "[oss-security] 20170224 CVE-2017-6209 Virglrenderer: stack buffer oveflow in parse_identifier",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2017/02/23/20",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1426149",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1426149",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-6209",
      datePublished: "2017-03-15T14:00:00",
      dateReserved: "2017-02-23T00:00:00",
      dateUpdated: "2024-08-05T15:25:48.535Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature