CVE-2017-5937

The util_format_is_pure_uint function in vrend_renderer.c in Virgil 3d project (aka virglrenderer) 0.6.0 and earlier allows local guest OS users to cause a denial of service (NULL pointer dereference) via a crafted VIRGL_CCMD_CLEAR command.

• CWE-476

• http://www.openwall.com/lists/oss-security/2017/02/09/4Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/96180Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1420246Issue Tracking, Patch, Third Party Advisory, VDB Entry
• https://cgit.freedesktop.org/virglrenderer/commit/?id=48f67f60967f963b698ec8df57ec6912a43d6282Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2017/02/09/4Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/96180Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1420246Issue Tracking, Patch, Third Party Advisory, VDB Entry
• https://cgit.freedesktop.org/virglrenderer/commit/?id=48f67f60967f963b698ec8df57ec6912a43d6282Patch, Third Party Advisory

Published

Mar 15, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5930The AliasHandler component in PostfixAdmin before 3.0.2 allo…2.7
• CVE-2017-5931Integer overflow in hw/virtio/virtio-crypto.c in QEMU (aka Q…8.8
• CVE-2017-5932The path autocompletion feature in Bash 4.4 allows local use…
• CVE-2017-5933Citrix NetScaler ADC and NetScaler Gateway 10.5 before Build…
• CVE-2017-5934Cross-site scripting (XSS) vulnerability in the link dialogu…
• CVE-2017-5936OpenStack Nova-LXD before 13.1.1 uses the wrong name for the…
• CVE-2017-5938Cross-site scripting (XSS) vulnerability in the nav_path fun…
• CVE-2017-5940Firejail before 0.9.44.6 and 0.9.38.x LTS before 0.9.38.10 L…
• CVE-2017-5941An issue was discovered in the node-serialize package 0.0.4 …9.8
• CVE-2017-5942An issue was discovered in the WP Mail plugin before 1.2 for…6.1
• CVE-2017-5943Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14,…
• CVE-2017-5944The dashboard subscription interface in Request Tracker (RT)…