CVE-2017-5957

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Stack-based buffer overflow in the vrend_decode_set_framebuffer_state function in vrend_decode.c in virglrenderer before 926b9b3460a48f6454d8bbe9e44313d86a65447f, as used in Quick Emulator (QEMU), allows a local guest users to cause a denial of service (application crash) via the "nr_cbufs" argument.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.openwall.com/lists/oss-security/2017/02/13/3Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/96215Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1421126Issue Tracking, Patch, Third Party Advisory, VDB Entry
https://cgit.freedesktop.org/virglrenderer/commit/?id=926b9b3460a48f6454d8bbe9e44313d86a65447fPatch, Third Party Advisory
https://security.gentoo.org/glsa/201707-06Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/02/13/3Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/96215Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1421126Issue Tracking, Patch, Third Party Advisory, VDB Entry
https://cgit.freedesktop.org/virglrenderer/commit/?id=926b9b3460a48f6454d8bbe9e44313d86a65447fPatch, Third Party Advisory
https://security.gentoo.org/glsa/201707-06Third Party Advisory

Timeline

Published: Mar 14, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-59599.8CSRF token bypass in GeniXCMS before 1.0.2 could result in escalation of privileges. The forgotpassword.php page can be used to acquire a to CVE-2017-59606.1An issue was discovered in Phalcon Eye through 0.4.1. The vulnerability exists due to insufficient filtration of user-supplied data in multi CVE-2017-59616.1An issue was discovered in ionize through 1.0.8. The vulnerability exists due to insufficient filtration of user-supplied data in the "path"CVE-2017-59626.1An issue was discovered in contexts_wurfl (for TYPO3) before 0.4.2. The vulnerability exists due to insufficient filtration of user-supplied CVE-2017-59636.1An issue was discovered in caddy (for TYPO3) before 7.2.10. The vulnerability exists due to insufficient filtration of user-supplied data in CVE-2017-59646.1An issue was discovered in Emoncms through 9.8.0. The vulnerability exists due to insufficient filtration of user-supplied data in multiple CVE-2017-59656.7The package manager in Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to execute arbitrary ASP code by creating a ZI CVE-2017-59664.9Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to read arbitrary files via an absolute path traversal attack on site CVE-2017-59674.0The time subsystem in the Linux kernel through 4.9.9, when CONFIG_TIMER_STATS is enabled, allows local users to discover real PID values (as CVE-2017-59694.7libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML CVE-2017-59707.5The ipv4_pktinfo_prepare function in net/ipv4/ip_sockglue.c in the Linux kernel through 4.9.9 allows attackers to cause a denial of service CVE-2017-59719.8SQL injection vulnerability in NewsBee CMS allow remote attackers to execute arbitrary SQL commands.