CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-2022-0135 – Ubuntu Security Notice USN-5309-1
https://notcve.org/view.php?id=CVE-2022-0135
01 Mar 2022 — An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER ioctl, leading to a denial of service or possible code execution. Se ha encontrado un problema de escritura fuera de límites en el renderizador virtual OpenGL de VirGL (virglrenderer). Este defecto permite a un invitado malicioso crear un recurso virgil especialmente diseñado y luego emitir un ioctl V... • https://bugzilla.redhat.com/show_bug.cgi?id=2037790 • CWE-787: Out-of-bounds Write •
CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2022-0175 – Ubuntu Security Notice USN-5309-1
https://notcve.org/view.php?id=CVE-2022-0175
01 Mar 2022 — A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to mmap from the guest kernel and read this uninitialized memory from the host, possibly leading to information disclosure. Se encontró un fallo en VirGL virtual OpenGL renderer (virglrenderer). El virgl no inicializaba apropiadamente la memoria cuando asignaba un recurso de memoria respaldado por el host. • https://access.redhat.com/security/cve/CVE-2022-0175 • CWE-909: Missing Initialization of Resource •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2020-8002
https://notcve.org/view.php?id=CVE-2020-8002
27 Jan 2020 — A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service via commands that attempt to launch a grid without previously providing a Compute Shader (CS). Una desreferencia del puntero NULL en el archivo vrend_renderer.c en virglrenderer versiones hasta 0.8.1, permite a atacantes causar una denegación de servicio por medio de comandos que intentan iniciar una cuadricula sin proveer previamente un Compute Shader (CS). • https://gitlab.freedesktop.org/virgl/virglrenderer/merge_requests/340 • CWE-476: NULL Pointer Dereference •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2020-8003
https://notcve.org/view.php?id=CVE-2020-8003
27 Jan 2020 — A double-free vulnerability in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation failure, because vrend_renderer_resource_allocated_texture is not an appropriate place for a free. Una vulnerabilidad de doble liberación en el archivo vrend_renderer.c en virglrenderer versiones hasta 0.8.1, permite a atacantes causar una denegación de servicio al desencadenar un fallo de asignación de textura, porque vrend_renderer_resource_allocated... • https://gitlab.freedesktop.org/virgl/virglrenderer/commit/f9b079ccc319c98499111f66bd654fc9b56cf15f?merge_request_iid=340 • CWE-415: Double Free •