PT-2019-4527 · Virgl+3 · Virglrenderer+3

Matthewshao · Publicado 2019-10-11 · Atualizado 2024-06-15 · CVE-2019-18390

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions virglrenderer versions 0.8.0 and earlier

Description The issue is related to an out-of-bounds read in the vrend blit need swizzle function in vrend renderer.c in virglrenderer. This can be exploited by guest OS users to cause a denial of service via VIRGL CCMD BLIT commands.

Recommendations For versions 0.8.0 and earlier, consider disabling the vrend blit need swizzle function as a temporary workaround to prevent exploitation via VIRGL CCMD BLIT commands until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2019-2895

ALT-PU-2019-2905

BDU:2020-00553

CVE-2019-18390

DLA-3232-1

OESA-2021-1427

OPENSUSE-SU-2020:0058-1

OPENSUSE-SU-2020_0058-1

OPENSUSE-SU-2024:11499-1

SUSE-SU-2020:0016-1

SUSE-SU-2020:0017-1

Produtos afetados

Alt Linux

Astra Linux

Suse

Virglrenderer

Referências · 77

• https://gitlab.freedesktop.org/virgl/virglrenderer/commit/24f67de7a9088a873844a39be03cee6882260ac9 · Correção
• https://osv.dev/vulnerability/DLA-3232-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/ALPINE-CVE-2019-18390 · Aviso do Fabricante
• https://access.redhat.com/security/cve/cve-2019-18390 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18390 · Nota
• https://suse.com/security/cve/CVE-2017-5957 · Nota
• https://suse.com/security/cve/CVE-2019-18390 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-18390 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1765584 · Correção
• https://wiki.astralinux.ru/pages/viewpage.action?pageId=270939041 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18389 · Nota de Segurança
• https://security-tracker.debian.org/tracker/DLA-3232-1 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2019-18390 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18388 · Nota de Segurança
• https://suse.com/security/cve/CVE-2019-18391 · Nota