PT-2019-4527 · Virgl+3 · Virglrenderer+3

Matthewshao · Published 2019-10-11 · Updated 2024-06-15 · CVE-2019-18390

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions virglrenderer versions 0.8.0 and earlier

Description The issue is related to an out-of-bounds read in the vrend blit need swizzle function in vrend renderer.c in virglrenderer. This can be exploited by guest OS users to cause a denial of service via VIRGL CCMD BLIT commands.

Recommendations For versions 0.8.0 and earlier, consider disabling the vrend blit need swizzle function as a temporary workaround to prevent exploitation via VIRGL CCMD BLIT commands until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2019-2895

ALT-PU-2019-2905

BDU:2020-00553

CVE-2019-18390

DLA-3232-1

OESA-2021-1427

OPENSUSE-SU-2020:0058-1

OPENSUSE-SU-2020_0058-1

OPENSUSE-SU-2024:11499-1

SUSE-SU-2020:0016-1

SUSE-SU-2020:0017-1

Affected Products

Alt Linux

Astra Linux

Suse

Virglrenderer

References · 77

• https://gitlab.freedesktop.org/virgl/virglrenderer/commit/24f67de7a9088a873844a39be03cee6882260ac9 · Patch
• https://osv.dev/vulnerability/DLA-3232-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2019-18390 · Vendor Advisory
• https://access.redhat.com/security/cve/cve-2019-18390 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-18390 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1765584 · Patch
• https://wiki.astralinux.ru/pages/viewpage.action?pageId=270939041 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18389 · Security Note
• https://security-tracker.debian.org/tracker/DLA-3232-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-18390 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18388 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2020:0058-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-18390 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-00915 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18390 · Security Note