REDHAT-BUG-1421126: Buffer Overflow
Virgil 3d project, used by Quick Emulator(Qemu) to implement 3D GPU support for the virtio GPU, is vulnerable to an stack buffer overflow issue. It could occur when in vrenddecodesetframebufferstate.
A guest user/process could use this flaw to crash the Qemu process instance resulting DoS.
Upstream patch: --------------- -> https://cgit.freedesktop.org/virglrenderer/commit/?id=926b9b3460a48f6454d8bbe9e44313d86a65447f
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2017/02/13/3
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1421126?
REDHAT-BUG-1421126 is classified as a moderate severity vulnerability due to its potential to cause a denial of service.
How do I fix REDHAT-BUG-1421126?
To fix REDHAT-BUG-1421126, you should update to the latest version of the virglrenderer and QEMU that address the buffer overflow issue.
What systems are affected by REDHAT-BUG-1421126?
Systems running the virglrenderer and QEMU are affected by REDHAT-BUG-1421126.
What can be exploited in the REDHAT-BUG-1421126 vulnerability?
The REDHAT-BUG-1421126 vulnerability can be exploited to crash the QEMU process instance, leading to denial of service.
Who can exploit REDHAT-BUG-1421126?
Any guest user or process can exploit REDHAT-BUG-1421126 to trigger the vulnerability.