Lucene search
PRIOn knowledge basePRION:CVE-2022-0175HistoryAug 26, 2022 - 6:15 p.m.
Information disclosure
2022-08-2618:15:00
PRIOn knowledge base
www.prio-n.com
3
virgl
opengl
renderer
memory allocation
information disclosure
A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to mmap from the guest kernel and read this uninitialized memory from the host, possibly leading to information disclosure.
| CPE | Name | Operator | Version |
|---|---|---|---|
| enterprise_linux | eq | 8.0 | |
| virglrenderer | eq | 0.9.1 | |
| virglrenderer | eq | 0.9.0 |
References
access.redhat.com/security/cve/CVE-2022-0175
bugzilla.redhat.com/show_bug.cgi?id=2039003
gitlab.freedesktop.org/virgl/virglrenderer/-/commit/b05bb61f454eeb8a85164c8a31510aeb9d79129c
gitlab.freedesktop.org/virgl/virglrenderer/-/merge_requests/654
security-tracker.debian.org/tracker/CVE-2022-0175
security.gentoo.org/glsa/202210-05
Related
redhatcve
redhatcve
CVE-2022-0175
2022-01-31 11:55:20
openvas
openvas
openSUSE: Security Advisory for virglrenderer (openSUSE-SU-2022:0111-1)
2022-02-01 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:0111-1)
2022-01-20 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:0110-1)
2022-01-20 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-0175 affecting package virglrenderer for versions less than 0.9.1-3
2022-10-05 23:33:43
CVE-2022-0175 affecting package virglrenderer for versions less than 0.9.1-3
2024-04-17 22:02:46
alpinelinux
alpinelinux
CVE-2022-0175
2022-08-26 18:15:08
nessus
nessus
openSUSE 15 Security Update : virglrenderer (openSUSE-SU-2022:0111-1)
2022-01-19 00:00:00
SUSE SLES15 Security Update : virglrenderer (SUSE-SU-2022:0111-1)
2022-01-19 00:00:00
SUSE SLED12 / SLES12 Security Update : virglrenderer (SUSE-SU-2022:0110-1)
2022-01-19 00:00:00
suse
suse
Security update for virglrenderer (important)
2022-01-18 00:00:00
nvd
nvd
CVE-2022-0175
2022-08-26 18:15:08
osv
osv
CVE-2022-0175
2022-08-26 18:15:08
virglrenderer vulnerabilities
2022-02-28 17:44:06
ubuntucve
ubuntucve
CVE-2022-0175
2022-02-01 00:00:00
cve
cve
CVE-2022-0175
2022-08-26 18:15:08
veracode
veracode
Information Disclosure
2022-09-30 19:19:16
debiancve
debiancve
CVE-2022-0175
2022-08-26 18:15:08
cvelist
cvelist
CVE-2022-0175
2022-08-26 00:00:00
ubuntu
ubuntu
virglrenderer vulnerabilities
2022-02-28 00:00:00
mageia
mageia
Updated virglrenderer packages fix security vulnerability
2022-11-02 01:58:59
gentoo
gentoo
virglrenderer: Multiple vulnerabilities
2022-10-16 00:00:00