CVE-2017-7346

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

The vmw_gb_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.7 does not validate certain levels data, which allows local users to cause a denial of service (system hang) via a crafted ioctl call for a /dev/dri/renderD* device.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Mar 30, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-73518.8A SQL injection issue exists in a file upload handler in REDCap 7.x before 7.0.11 via a trailing substring to SendITController:upload.CVE-2017-73525.4Stored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows remote authenticated users to inject arbitrary web scrip CVE-2017-73579.1Hipchat Server before 2.2.3 allows remote authenticated users with Server Administrator level privileges to execute arbitrary code by import CVE-2017-73587.3In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local attackers to own arbitrary directory path loc CVE-2017-73596.1Pixie 1.0.4 allows an admin/index.php s=login&m= XSS attack.CVE-2017-73606.1Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack.CVE-2017-73616.1Pixie 1.0.4 allows an admin/index.php s=publish&m=static&x= XSS attack.CVE-2017-73626.1Pixie 1.0.4 allows an admin/index.php s=publish&m=dynamic&x= XSS attack.CVE-2017-73636.1Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack.CVE-2017-73649.8In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_data(), variable ds_da CVE-2017-73657.8In all Android releases from CAF using the Linux kernel, a buffer overread can occur if a particular string is not NULL terminated.CVE-2017-73665.5In all Android releases from CAF using the Linux kernel, a KGSL ioctl was not validating all of its parameters.