Astra Linux – Vulnerability in virglrenderer

A double-free vulnerability exists in the vrendrenderer.c file within virglrenderer up to version 0.8.1. Attackers can exploit this vulnerability to cause a denial of service by triggering texture allocation failures. The reason is that vrendrendererresourceallocatedtexture is not an appropriate...

SUSE CVE-2017-5993

Memory leak in the vrendrendererinitblitctx function in vrendblitter.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service host memory consumption via a large number of VIRGLCCMDBLIT commands...

SUSE CVE-2019-18389

A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service, or QEMU guest-to-host escape and code execution, via VIRGLCCMDRESOURCEINLINEWRITE commands...

SUSE CVE-2020-8003

A double-free vulnerability in vrendrenderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation failure, because vrendrendererresourceallocatedtexture is not an appropriate place for a free...

DEBIAN-CVE-2020-8003

A double-free vulnerability in vrendrenderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation failure, because vrendrendererresourceallocatedtexture is not an appropriate place for a free...

PT-2020-6846 · Unknown +2 · Virglrenderer +2

Name of the Vulnerable Software and Affected Versions: virglrenderer versions 0.8.1 and earlier Description: The issue is related to a NULL pointer dereference in the vrend renderer.c component of the virtual OpenGL renderer Virglrenderer. This allows attackers to cause a denial of service via...

PT-2020-6847 · Unknown +2 · Virglrenderer +2

Name of the Vulnerable Software and Affected Versions: virglrenderer versions 0.8.1 and earlier Description: The issue is related to a double-free vulnerability in the vrend renderer.c component of the virtual OpenGL renderer Virglrenderer. This vulnerability can be exploited to cause a denial of...

DEBIAN-CVE-2019-18391

A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGLCCMDRESOURCEINLINEWRITE commands...

ALPINE-CVE-2019-18389

A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service, or QEMU guest-to-host escape and code execution, via VIRGLCCMDRESOURCEINLINEWRITE commands...

PT-2019-4528

Name of the Vulnerable Software and Affected Versions virglrenderer versions prior to 0.8.0 Description A heap-based buffer overflow issue in the vrend renderer transfer write iov function allows guest OS users to cause a denial of service via VIRGL CCMD RESOURCE INLINE WRITE commands. This issue...

PT-2019-6317

Name of the Vulnerable Software and Affected Versions Virglrenderer versions through 0.8.0 Description A heap-based buffer overflow issue in the vrend renderer transfer write iov function allows guest OS users to cause a denial of service or achieve QEMU guest-to-host escape and code execution vi...

UBUNTU-CVE-2017-6317

Memory leak in the addshaderprogram function in vrendrenderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service host memory consumption via vectors involving the sprog variable...

PT-2017-16813

Name of the Vulnerable Software and Affected Versions virglrenderer versions prior to 0.6.0 Description The issue is related to a memory leak in the vrend renderer init blit ctx function, located in vrend blitter.c. This leak can be triggered by local guest OS users, allowing them to cause a deni...