Upstream information

CVE-2017-9060 at MITRE

Description

Memory leak in the virtio_gpu_set_scanout function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (memory consumption) via a large number of "VIRTIO_GPU_CMD_SET_SCANOUT:" commands.

SUSE information

CVSS v2 Scores
  National Vulnerability Database SUSE
Base Score 4.94 3.47
Vector AV:L/AC:L/Au:N/C:N/I:N/A:C AV:N/AC:M/Au:S/C:N/I:N/A:P
Access Vector Local Network
Access Complexity Low Medium
Authentication None Single
Confidentiality Impact None None
Integrity Impact None None
Availability Impact Complete Partial
CVSS v3 Scores
  National Vulnerability Database SUSE
Base Score 5.5 5
Vector AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L
Access Vector Local Network
Access Complexity Low Low
Privileges Required Low Low
User Interaction None None
Scope Unchanged Changed
Confidentiality Impact None None
Integrity Impact None None
Availability Impact High Low
SUSE Bugzilla entry: 1039886 [RESOLVED / ]

No SUSE Security Announcements cross referenced.