Astra Linux – Vulnerability in virglrenderer

A double-free vulnerability exists in the vrendrenderer.c file within virglrenderer up to version 0.8.1. Attackers can exploit this vulnerability to cause a denial of service by triggering texture allocation failures. The reason is that vrendrendererresourceallocatedtexture is not an appropriate...

SUSE CVE-2017-5993

Memory leak in the vrendrendererinitblitctx function in vrendblitter.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service host memory consumption via a large number of VIRGLCCMDBLIT commands...

SUSE CVE-2017-6355

Integer overflow in the vrendcreateshader function in vrendrenderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service process crash via crafted pktlength and offlen values, which trigger an out-of-bounds access...

SUSE CVE-2019-18389

A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service, or QEMU guest-to-host escape and code execution, via VIRGLCCMDRESOURCEINLINEWRITE commands...

SUSE CVE-2020-8003

A double-free vulnerability in vrendrenderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation failure, because vrendrendererresourceallocatedtexture is not an appropriate place for a free...

DEBIAN-CVE-2020-8003

A double-free vulnerability in vrendrenderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation failure, because vrendrendererresourceallocatedtexture is not an appropriate place for a free...

PT-2020-6846 · Unknown +2 · Virglrenderer +2

Name of the Vulnerable Software and Affected Versions: virglrenderer versions 0.8.1 and earlier Description: The issue is related to a NULL pointer dereference in the vrend renderer.c component of the virtual OpenGL renderer Virglrenderer. This allows attackers to cause a denial of service via...

PT-2020-6847 · Unknown +2 · Virglrenderer +2

Name of the Vulnerable Software and Affected Versions: virglrenderer versions 0.8.1 and earlier Description: The issue is related to a double-free vulnerability in the vrend renderer.c component of the virtual OpenGL renderer Virglrenderer. This vulnerability can be exploited to cause a denial of...

DEBIAN-CVE-2019-18391

A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGLCCMDRESOURCEINLINEWRITE commands...

ALPINE-CVE-2019-18389

A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service, or QEMU guest-to-host escape and code execution, via VIRGLCCMDRESOURCEINLINEWRITE commands...

PT-2019-4527

Name of the Vulnerable Software and Affected Versions virglrenderer versions 0.8.0 and earlier Description The issue is related to an out-of-bounds read in the vrend blit need swizzle function in vrend renderer.c in virglrenderer. This can be exploited by guest OS users to cause a denial of servi...

PT-2019-4528

Name of the Vulnerable Software and Affected Versions virglrenderer versions prior to 0.8.0 Description A heap-based buffer overflow issue in the vrend renderer transfer write iov function allows guest OS users to cause a denial of service via VIRGL CCMD RESOURCE INLINE WRITE commands. This issue...

PT-2019-6318

Name of the Vulnerable Software and Affected Versions Virglrenderer versions through 0.8.0 Description The issue is related to a NULL pointer dereference in the vrend renderer.c component of the virtual OpenGL renderer. This can be exploited by guest OS users to cause a denial of service via...

PT-2019-6317

Name of the Vulnerable Software and Affected Versions Virglrenderer versions through 0.8.0 Description A heap-based buffer overflow issue in the vrend renderer transfer write iov function allows guest OS users to cause a denial of service or achieve QEMU guest-to-host escape and code execution vi...

UBUNTU-CVE-2017-6317

Memory leak in the addshaderprogram function in vrendrenderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service host memory consumption via vectors involving the sprog variable...

PT-2017-16948

Name of the Vulnerable Software and Affected Versions virglrenderer versions prior to 0.6.0 Description The issue allows local guest OS users to cause a denial of service by destroying context 0, resulting in a NULL pointer dereference and a QEMU process crash. This is due to a problem in the vre...

PT-2017-16771

Name of the Vulnerable Software and Affected Versions virglrenderer versions 0.6.0 and earlier Description The issue allows local guest OS users to cause a denial of service via a crafted VIRGL CCMD CLEAR command, resulting in a NULL pointer dereference. This occurs due to a problem in the util...

PT-2017-7777

Name of the Vulnerable Software and Affected Versions virglrenderer versions prior to 0.6.0 Description The issue is related to a memory leak in the vrend renderer context create internal function in vrend decode.c. This allows local guest OS users to cause a denial of service by repeatedly...

PT-2017-16813

Name of the Vulnerable Software and Affected Versions virglrenderer versions prior to 0.6.0 Description The issue is related to a memory leak in the vrend renderer init blit ctx function, located in vrend blitter.c. This leak can be triggered by local guest OS users, allowing them to cause a deni...

PT-2017-16814

Name of the Vulnerable Software and Affected Versions virglrenderer versions prior to 0.6.0 Description The issue is related to a heap-based buffer overflow in the vrend create vertex elements state function, located in vrend renderer.c. This occurs when the num elements parameter is used to caus...