CVE-2017-5580: Buffer Overflow
Published Mar 15, 2017
·Updated
The parseinstruction function in gallium/auxiliary/tgsi/tgsitext.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and process crash) via a crafted texture instruction.
Affected Software
1 affected component
Virglrenderer Project Virglrenderer<=0.5.0
Remediation
Patch Available
Event History
Mar 15, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·03:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-5580?
CVE-2017-5580 is considered a high-severity vulnerability due to its potential to cause denial of service.
2
How do I fix CVE-2017-5580?
To fix CVE-2017-5580, upgrade virglrenderer to version 0.6.0 or later.
3
What type of attack does CVE-2017-5580 enable?
CVE-2017-5580 allows local guest OS users to exploit an out-of-bounds array access, leading to a process crash.
4
Is CVE-2017-5580 exploitable remotely?
CVE-2017-5580 is not remotely exploitable as it requires local access to the guest OS.
5
Which versions of virglrenderer are affected by CVE-2017-5580?
CVE-2017-5580 affects virglrenderer versions up to and including 0.5.0.