CVE-2017-6355
10.03.2017, 02:59
Integer overflow in the vrend_create_shader function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (process crash) via crafted pkt_length and offlen values, which trigger an out-of-bounds access.Enginsight
| Vendor | Product | Version |
|---|---|---|
| freedesktop | virglrenderer | 𝑥 ≤ 0.5.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References