CVE-2017-5957: Buffer Overflow
Stack-based buffer overflow in the vrenddecodesetframebufferstate function in vrenddecode.c in virglrenderer before 926b9b3460a48f6454d8bbe9e44313d86a65447f, as used in Quick Emulator (QEMU), allows a local guest users to cause a denial of service (application crash) via the "nrcbufs" argument.
Other sources
Virgil 3d project, used by Quick Emulator(Qemu) to implement 3D GPU support for the virtio GPU, is vulnerable to an stack buffer overflow issue. It could occur when in vrenddecodesetframebufferstate.
A guest user/process could use this flaw to crash the Qemu process instance resulting DoS.
Upstream patch: --------------- -> https://cgit.freedesktop.org/virglrenderer/commit/?id=926b9b3460a48f6454d8bbe9e44313d86a65447f
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2017/02/13/3
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
virglrendererto a version that resolves this vulnerability.Fixed in 926b9b3460a48f6454d8bbe9e44313d86a65447fPatch Upstream patch - Compensating control
Mitigate potential denial of service by preventing untrusted guest users/processes from invoking the vulnerable virtio GPU path in Quick Emulator (Qemu) until virglrenderer is patched.
Event History
Frequently Asked Questions
What is the severity of CVE-2017-5957?
CVE-2017-5957 has been classified as a moderate severity vulnerability due to its potential to cause application crashes.
How do I fix CVE-2017-5957?
To fix CVE-2017-5957, update virglrenderer to version 0.6.0 or later, as the vulnerability is resolved in this version.
What type of vulnerability is CVE-2017-5957?
CVE-2017-5957 is a stack-based buffer overflow vulnerability.
Who is affected by CVE-2017-5957?
Local guest users running affected versions of virglrenderer in QEMU may be impacted by CVE-2017-5957.
Can CVE-2017-5957 lead to data loss?
CVE-2017-5957 may lead to denial of service, but it is not specifically noted to cause data loss.