CVE-2017-6355

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Integer overflow in the vrend_create_shader function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (process crash) via crafted pkt_length and offlen values, which trigger an out-of-bounds access.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-190

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.openwall.com/lists/oss-security/2017/02/27/3Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/96460Third Party Advisory, VDB Entry
https://cgit.freedesktop.org/virglrenderer/commit/?id=93761787b29f37fa627dea9082cdfc1a1ec608d6Patch, Third Party Advisory, Vendor Advisory
https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.htmlPatch, Vendor Advisory
https://security.gentoo.org/glsa/201707-06
http://www.openwall.com/lists/oss-security/2017/02/27/3Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/96460Third Party Advisory, VDB Entry
https://cgit.freedesktop.org/virglrenderer/commit/?id=93761787b29f37fa627dea9082cdfc1a1ec608d6Patch, Third Party Advisory, Vendor Advisory
https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.htmlPatch, Vendor Advisory
https://security.gentoo.org/glsa/201707-06

Timeline

Published: Mar 10, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-63565.3Palo Alto Networks Terminal Services (aka TS) Agent 6.0, 7.0, and 8.0 before 8.0.1 uses weak permissions for unspecified resources, which al CVE-2017-63599.8QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and execute arbitrary commands via unspecified vector CVE-2017-63609.8QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and obtain sensitive information via unspecified vect CVE-2017-63619.8QNAP QTS before 4.2.4 Build 20170313 allows attackers to execute arbitrary commands via unspecified vectors.CVE-2017-63627.5Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote attackers to cause a denial of service via vect CVE-2017-63638.1In the GD Graphics Library (aka LibGD) through 2.2.5, there is a heap-based buffer over-read in tiffWriter in gd_tiff.c. NOTE: the vendor sa CVE-2017-63668.8Cross-site request forgery (CSRF) vulnerability in NETGEAR DGN2200 routers with firmware 10.0.0.20 through 10.0.0.50 allows remote attackers CVE-2017-63677.5In Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to crash. The attack methodology involves a long Host hea CVE-2017-63698.8Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before 3.0.2 allow remote authenticated users to execute c CVE-2017-63705.3TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtain CVE-2017-63717.5Synchronet BBS 3.16c for Windows allows remote attackers to cause a denial of service (service crash) via a long string in the HTTP Referer CVE-2017-63777.5When adding a private file via the editor in Drupal 8.2.x before 8.2.7, the editor will not correctly check access for the file being attach