Re: CVE request Qemu: display: virtio-gpu: host memory leakage in virtio_gpu_resource_attach_backing

[<cve-assign () mitre org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

> Quick Emulator(Qemu) built with the Virtio GPU Device emulator support is
> vulnerable to a memory leakage issue. It could occur while processing
> 'VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING' command.
>
> A guest user/process could use this flaw to leak host memory resulting in DoS.
>
> https://lists.nongnu.org/archive/html/qemu-devel/2017-01/msg00151.html
> https://bugzilla.redhat.com/show_bug.cgi?id=1415795
> http://git.qemu.org/?p=qemu.git;a=commit;h=204f01b30975923c64006f8067f0937b91eea68b

Use CVE-2017-5578.

- -- 
CVE Assignment Team
M/S M300, 202 Burlington Road, Bedford, MA 01730 USA
[ A PGP key is available for encrypted communications at
  http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=J/T4
-----END PGP SIGNATURE-----