NVD Vulnerability Detail

CVE-2017-10810

Summary	Memory leak in the virtio_gpu_object_create function in drivers/gpu/drm/virtio/virtgpu_object.c in the Linux kernel through 4.11.8 allows attackers to cause a denial of service (memory consumption) by triggering object-initialization failures.
Publication Date	July 5, 2017, 5:29 a.m.
Registration Date	Jan. 26, 2021, 1:12 p.m.
Last Update	Nov. 21, 2024, 12:06 p.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=385aee965b4e4c36551c362a334378d2985b722a	Mailing List Patch Third Party Advisory
2	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=385aee965b4e4c36551c362a334378d2985b722a	Mailing List Patch Third Party Advisory
3	http://www.debian.org/security/2017/dsa-3927	Third Party Advisory
4	http://www.debian.org/security/2017/dsa-3927	Third Party Advisory
5	http://www.securityfocus.com/bid/99433	Third Party Advisory VDB Entry
6	http://www.securityfocus.com/bid/99433	Third Party Advisory VDB Entry
7	https://github.com/torvalds/linux/commit/385aee965b4e4c36551c362a334378d2985b722a	Patch Third Party Advisory
8	https://github.com/torvalds/linux/commit/385aee965b4e4c36551c362a334378d2985b722a	Patch Third Party Advisory
9	https://lkml.org/lkml/2017/4/6/668	Mailing List Patch Third Party Advisory
10	https://lkml.org/lkml/2017/4/6/668	Mailing List Patch Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-772	有効なライフタイム後のリソースの解放の欠如	https://cwe.mitre.org/data/definitions/772.html

JVN Vulnerability Information

Linux Kernel の drivers/gpu/drm/virtio/virtgpu_object.c の virtio_gpu_object_create 関数におけるサービス運用妨害 (DoS) の脆弱性

Title	Linux Kernel の drivers/gpu/drm/virtio/virtgpu_object.c の virtio_gpu_object_create 関数におけるサービス運用妨害 (DoS) の脆弱性
Summary	Linux Kernel の drivers/gpu/drm/virtio/virtgpu_object.c の virtio_gpu_object_create 関数には、メモリリークにより、サービス運用妨害 (メモリ消費) 状態にされる脆弱性が存在します。
Possible impacts	攻撃者により、オブジェクトの初期化の失敗を誘発されることで、サービス運用妨害 (メモリ消費) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	April 7, 2017, midnight
Registration Date	July 31, 2017, 4:42 p.m.
Last Update	July 31, 2017, 4:42 p.m.

Affected System

Linux

Linux Kernel 4.11.8 まで

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2017-10810	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10810
National Vulnerability Database (NVD)
2	CVE-2017-10810	https://nvd.nist.gov/vuln/detail/CVE-2017-10810

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-399	https://jvndb.jvn.jp/ja/cwe/CWE-399.html

ベンダー情報

No	Name	URL
GitHub
1	drm/virtio: don't leak bo on drm_gem_object_init failure	https://github.com/torvalds/linux/commit/385aee965b4e4c36551c362a334378d2985b722a
Linux Kernel
2	Linux Kernel Archives	http://www.kernel.org
Linux kernel source tree
3	drm/virtio: don't leak bo on drm_gem_object_init failure	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=385aee965b4e4c36551c362a334378d2985b722a

その他

No	Name	URL
関連文書
1	[PATCH] drm/virtio: don't leak bo on drm_gem_object_init failure	https://lkml.org/lkml/2017/4/6/668

Change Log

No	Changed Details	Date of change
0	[2017年07月31日] 掲載	Feb. 17, 2018, 10:37 a.m.