PT-2019-6318 · Virgl+3 · Virglrenderer+3

Matthewshao · Publicado 2019-10-08 · Atualizado 2024-06-15 · CVE-2019-18388

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Virglrenderer versions through 0.8.0

Description The issue is related to a NULL pointer dereference in the vrend renderer.c component of the virtual OpenGL renderer. This can be exploited by guest OS users to cause a denial of service via malformed commands. The vulnerability is associated with pointer dereference errors, which can allow an attacker to disrupt service.

Recommendations For versions through 0.8.0, update to a version later than 0.8.0 to resolve the issue. At the moment, there is no information about other specific fixes for this vulnerability.

Correção

DoS

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2019-2895

ALT-PU-2019-2905

BDU:2023-00916

CVE-2019-18388

DLA-3232-1

OESA-2021-1427

OPENSUSE-SU-2020:0058-1

OPENSUSE-SU-2020_0058-1

OPENSUSE-SU-2024:11499-1

SUSE-SU-2020:0016-1

SUSE-SU-2020:0017-1

SUSE-SU-2020_0016-1

SUSE-SU-2020_0017-1

Produtos afetados

Alt Linux

Astra Linux

Suse

Virglrenderer

Referências · 78

• https://osv.dev/vulnerability/DLA-3232-1 · Aviso do Fabricante
• https://gitlab.freedesktop.org/virgl/virglrenderer/merge_requests/314/diffs?commit_id=d2cdbcf6a8f2317f250fd54f08aa35dde2fa3e30#diff-content-3cd772559e0d73afa136d6818023cfd0c4c8ecc0 · Nota
• https://suse.com/security/cve/CVE-2017-5957 · Nota
• https://access.redhat.com/security/cve/cve-2019-18388 · Aviso do Fabricante
• https://osv.dev/vulnerability/ALPINE-CVE-2019-18388 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1765578 · Correção
• https://wiki.astralinux.ru/pages/viewpage.action?pageId=270939041 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-18388 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18389 · Nota de Segurança
• https://security-tracker.debian.org/tracker/DLA-3232-1 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18388 · Nota de Segurança
• https://suse.com/security/cve/CVE-2019-18391 · Nota
• https://cve.org/CVERecord?id=CVE-2019-18388 · Nota de Segurança
• https://osv.dev/vulnerability/openSUSE-SU-2020:0058-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2020-8003 · Nota