307 matches found
Mageia: Security Advisory (MGASA-2022-0401)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2022-0401 Updated virglrenderer packages fix security vulnerability
An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer virglrenderer. This flaw allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPUEXECBUFFER ioctl, leading to a denial of service or possible code execution. CVE-2022-0135 A flaw was...
virglrenderer: Multiple vulnerabilities
Background A virtual 3D GPU library, that allows the guest operating system to use the host GPU to accelerate 3D rendering. Description Multiple vulnerabilities have been discovered in virglrenderer. Please review the CVE identifiers referenced below for details. Impact Please review the referenc...
GLSA-202210-05 : virglrenderer: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202210-05 virglrenderer: Multiple vulnerabilities - An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer virglrenderer. This flaw allows a malicious guest to create a specially crafted virgil resource and th...
Huawei EulerOS: Security Advisory for virglrenderer (EulerOS-SA-2022-2595)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 3.0.6.0 : virglrenderer (EulerOS-SA-2022-2595)
According to the versions of the virglrenderer packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c in virglrenderer through 0.8...
CVE-2022-0175 affecting package virglrenderer for versions less than 0.9.1-3
CVE-2022-0175 affecting package virglrenderer for versions less than 0.9.1-3. A patched version of the package is available...
Out-of-bounds Write
virglrenderer:edge is vulnerable to out-of-bounds write. The VirGL virtual OpenGL renderer virglrenderer allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPUEXECBUFFER ioctl, leading to a denial of service or possible code execution...
CVE-2022-0135 affecting package virglrenderer for versions less than 0.9.1-2
CVE-2022-0135 affecting package virglrenderer for versions less than 0.9.1-2. A patched version of the package is available...
AZL-10772 CVE-2022-0175 affecting package virglrenderer for versions less than 0.9.1-3
A flaw was found in the VirGL virtual OpenGL renderer virglrenderer. The virgl did not properly initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to mmap from the guest kernel and read this uninitialized memory from the host, possibly leading t...
AZL-35347 CVE-2022-0175 affecting package virglrenderer for versions less than 0.9.1-3
A flaw was found in the VirGL virtual OpenGL renderer virglrenderer. The virgl did not properly initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to mmap from the guest kernel and read this uninitialized memory from the host, possibly leading t...
CVE-2022-0175
A flaw was found in the VirGL virtual OpenGL renderer virglrenderer. The virgl did not properly initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to mmap from the guest kernel and read this uninitialized memory from the host, possibly leading t...
CVE-2022-0175
CVE-2022-0175 affects virglrenderer (VirGL virtual OpenGL renderer). A flaw in how memory is initialized for host-backed resources allows a malicious guest to mmap the guest kernel and read uninitialized host memory, potentially leaking information. Impact is information disclosure; attack vector...
AZL-35346 CVE-2022-0135 affecting package virglrenderer for versions less than 0.9.1-3
An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer virglrenderer. This flaw allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPUEXECBUFFER ioctl, leading to a denial of service or possible code execution...
AZL-10724 CVE-2022-0135 affecting package virglrenderer for versions less than 0.9.1-2
An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer virglrenderer. This flaw allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPUEXECBUFFER ioctl, leading to a denial of service or possible code execution...
CVE-2022-0135
An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer virglrenderer. This flaw allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPUEXECBUFFER ioctl, leading to a denial of service or possible code execution...
CVE-2022-0135
CVE-2022-0135 affects the VirGL virtual OpenGL renderer (virglrenderer). A crafted virgil resource can trigger an out-of-bounds write via the VIRTGPU_EXECBUFFER ioctl, leading to denial of service or possible code execution in the guest. Connected advisories confirm the issue and note that patche...
OESA-2022-1776 virglrenderer security update
The virgil3d rendering library is a library used by qemu to implement 3D GPU support for the virtio GPU. Security Fixes: No description is available for this CVE.CVE-2022-0175...
openSUSE: Security Advisory for virglrenderer (SUSE-SU-2022:2395-1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...