CVE-2017-6355

Integer overflow in the vrend_create_shader function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (process crash) via crafted pkt_length and offlen values, which trigger an out-of-bounds access.

• CWE-190

• http://www.openwall.com/lists/oss-security/2017/02/27/3Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/96460Third Party Advisory, VDB Entry
• https://cgit.freedesktop.org/virglrenderer/commit/?id=93761787b29f37fa627dea9082cdfc1a1ec608d6Patch, Third Party Advisory, Vendor Advisory
• https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.htmlPatch, Vendor Advisory
• https://security.gentoo.org/glsa/201707-06
• http://www.openwall.com/lists/oss-security/2017/02/27/3Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/96460Third Party Advisory, VDB Entry
• https://cgit.freedesktop.org/virglrenderer/commit/?id=93761787b29f37fa627dea9082cdfc1a1ec608d6Patch, Third Party Advisory, Vendor Advisory
• https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.htmlPatch, Vendor Advisory
• https://security.gentoo.org/glsa/201707-06

Published

Mar 10, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6347The ip_cmsg_recv_checksum function in net/ipv4/ip_sockglue.c…7.8
• CVE-2017-6348The hashbin_delete function in net/irda/irqueue.c in the Lin…
• CVE-2017-6349An integer overflow at a u_read_undo memory allocation site …
• CVE-2017-6350An integer overflow at an unserialize_uep memory allocation …
• CVE-2017-6351The WePresent WiPG-1500 device with firmware 1.0.3.7 has a m…
• CVE-2017-6353net/sctp/socket.c in the Linux kernel through 4.10.1 does no…
• CVE-2017-6356Palo Alto Networks Terminal Services (aka TS) Agent 6.0, 7.0…5.3
• CVE-2017-6359QNAP QTS before 4.2.4 Build 20170313 allows attackers to gai…
• CVE-2017-6360QNAP QTS before 4.2.4 Build 20170313 allows attackers to gai…
• CVE-2017-6361QNAP QTS before 4.2.4 Build 20170313 allows attackers to exe…
• CVE-2017-6362Double free vulnerability in the gdImagePngPtr function in l…
• CVE-2017-6363In the GD Graphics Library (aka LibGD) through 2.2.5, there …8.1