CVE-2016-10214: Medium severity freedesktop virglrenderer vulnerability
Published Mar 20, 2017
·Updated
Memory leak in the virglresourceattachbacking function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (memory consumption) via a large number of VIRTIOGPUCMDRESOURCEATTACHBACKING commands.
Affected Software
1 affected component
Virglrenderer Project Virglrenderer<=0.5.0
Remediation
Patch Available
Event History
Mar 20, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-10214?
CVE-2016-10214 has a medium severity rating due to its potential for causing denial of service through memory consumption.
2
How do I fix CVE-2016-10214?
To fix CVE-2016-10214, upgrade virglrenderer to version 0.6.0 or later where the vulnerability is addressed.
3
Who is affected by CVE-2016-10214?
Local guest OS users of virglrenderer versions before 0.6.0 are affected by CVE-2016-10214.
4
What is the impact of CVE-2016-10214?
The impact of CVE-2016-10214 is a denial of service condition due to excessive memory consumption.
5
What commands trigger CVE-2016-10214?
The vulnerability is triggered by a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands.