CVE-2017-6209: Buffer Overflow
Stack-based buffer overflow in the parseidentifier function in tgsitext.c in the TGSI auxiliary module in the Gallium driver in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors related to parsing properties.
Other sources
Virgil 3d project, used by Quick Emulator(Qemu) to implement 3D GPU support for the virtio GPU, is vulnerable to an OOB array access issue. It could occur when parsing properties in parseidentifier().
A guest user/process could use this flaw to crash the Qemu process instance resulting DoS.
Upstream patch: --------------- -> https://cgit.freedesktop.org/virglrenderer/commit/?id=e534b51ca3c3cd25f3990589932a9ed711c59b27
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2017/02/23/20
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
virglrendererto a version that resolves this vulnerability.Fixed in 0.6.0
Event History
Frequently Asked Questions
What is the severity of CVE-2017-6209?
CVE-2017-6209 is classified as a high severity vulnerability due to its potential for denial of service and local exploitation.
How do I fix CVE-2017-6209?
To fix CVE-2017-6209, update virglrenderer to version 0.6.0 or later.
What kind of systems are affected by CVE-2017-6209?
CVE-2017-6209 affects versions of virglrenderer up to and including 0.5.0 on guest OS environments.
What is the impact of CVE-2017-6209?
The impact of CVE-2017-6209 includes potential crashes of the QEMU process and denial of service for local users.
Who can exploit CVE-2017-6209?
CVE-2017-6209 can be exploited by local guest OS users with access to the vulnerable system.