CVE

Id
102677  
CVE No.
CVE-2017-5857  
Status
Candidate  
Description
Memory leak in the virgl_cmd_resource_unref function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_UNREF commands sent without detaching the backing storage beforehand.  
Phase
Assigned (20170201)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
805590 102677 CVE-2017-5857 MLIST:[oss-security] 20170201 CVE request Qemu: display: virtio-gpu-3d: host memory leakage in virgl_cmd_resource_unref  View
805591 102677 CVE-2017-5857 URL:http://www.openwall.com/lists/oss-security/2017/02/01/21  View
805592 102677 CVE-2017-5857 MLIST:[oss-security] 20170202 Re: CVE request Qemu: display: virtio-gpu-3d: host memory leakage in virgl_cmd_resource_unref  View
805593 102677 CVE-2017-5857 URL:http://www.openwall.com/lists/oss-security/2017/02/02/16  View
805594 102677 CVE-2017-5857 CONFIRM:http://git.qemu-project.org/?p=qemu.git;a=commit;h=5e8e3c4c75c199aa1017db816fca02be2a9f8798  View
805595 102677 CVE-2017-5857 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1418382  View
805596 102677 CVE-2017-5857 BID:95993  View

Related JVN