CVE-2017-6210: Null Pointer Dereference
The vrenddecodereset function in vrenddecode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (NULL pointer dereference and QEMU process crash) by destroying context 0 (zero).
Other sources
Virgil 3d project, used by Quick Emulator(Qemu) to implement 3D GPU support for the virtio GPU, is vulnerable to a null pointer dereference flaw. It could occur when destroying renderer context zero(0) in 'vrenddecodereset'.
A guest user/process could use this flaw to crash the Qemu process instance resulting DoS.
Upstream patch: --------------- -> https://cgit.freedesktop.org/virglrenderer/commit/?id=0a5dff15912207b83018485f83e067474e818bab
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2017/02/23/21
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
virglrendererto a version that resolves this vulnerability.Fixed in 0.6.0
Event History
Frequently Asked Questions
What is the severity of CVE-2017-6210?
CVE-2017-6210 has a severity rating of medium due to its potential to cause denial of service.
How do I fix CVE-2017-6210?
To fix CVE-2017-6210, upgrade to virglrenderer version 0.6.0 or later.
What are the impacts of CVE-2017-6210?
The impact of CVE-2017-6210 is denial of service due to a NULL pointer dereference that can crash the QEMU process.
Who is affected by CVE-2017-6210?
CVE-2017-6210 affects local users on guest operating systems running virglrenderer versions prior to 0.6.0.
Is CVE-2017-6210 related to QEMU?
Yes, CVE-2017-6210 affects the QEMU process when using virglrenderer for 3D GPU support.