Linux Distros Unpatched Vulnerability : CVE-2022-0135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer virglrenderer. This flaw allows a malicious guest to create a specially crafted virg...

CVE-2022-0135 affecting package virglrenderer for versions less than 0.9.1-3

CVE-2022-0135 affecting package virglrenderer for versions less than 0.9.1-3. A patched version of the package is available...

Debian: Security Advisory (DLA-3232-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-202210-05 : virglrenderer: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202210-05 virglrenderer: Multiple vulnerabilities - An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer virglrenderer. This flaw allows a malicious guest to create a specially crafted virgil resource and th...

OESA-2022-1890 virglrenderer security update

The virgil3d rendering library is a library used by qemu to implement 3D GPU support for the virtio GPU. Security Fixes: An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer virglrenderer. This flaw allows a malicious guest to create a specially crafted virgil resource and...

CVE-2022-0135

CVE-2022-0135 affects the VirGL virtual OpenGL renderer (virglrenderer). A crafted virgil resource can trigger an out-of-bounds write via the VIRTGPU_EXECBUFFER ioctl, leading to denial of service or possible code execution in the guest. Connected advisories confirm the issue and note that patche...

openSUSE: Security Advisory for virglrenderer (SUSE-SU-2022:2395-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2022:2395-1 Security update for virglrenderer

This update for virglrenderer fixes the following issues: - CVE-2022-0135: Fix OOB in readtransferdata. bsc1195389...

SUSE: Security Advisory (SUSE-SU-2022:2395-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 20.04 LTS : virglrenderer vulnerabilities (USN-5309-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5309-1 advisory. It was discovered that virglrenderer incorrectly handled memory. An attacker inside a guest could use this issue to cause virglrenderer to crash, resulti...

openSUSE 15 Security Update : virglrenderer (openSUSE-SU-2022:0479-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:0479-1 advisory. - An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer virglrenderer. This flaw allows a malicious guest to create a speciall...

SUSE SLES15 Security Update : virglrenderer (SUSE-SU-2022:0479-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0479-1 advisory. - An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer virglrenderer. This flaw allows a malicious guest to create a...

SUSE: Security Advisory (SUSE-SU-2022:0479-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:0479-1 Security update for virglrenderer

This update for virglrenderer fixes the following issues: - CVE-2022-0135: Fixed out-of-bonds write in readtransferdata bsc1195389...

OPENSUSE-SU-2022:0479-1 Security update for virglrenderer

This update for virglrenderer fixes the following issues: - CVE-2022-0135: Fixed out-of-bonds write in readtransferdata bsc1195389...

CVE-2022-0135

An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer virglrenderer. This flaw allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPUEXECBUFFER ioctl, leading to a denial of service or possible code execution...