An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER ioctl, leading to a denial of service or possible code execution.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3232 advisory.

  - A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to     cause a denial of service via malformed commands. (CVE-2019-18388)

  - A heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer.c in     virglrenderer through 0.8.0 allows guest OS users to cause a denial of service, or QEMU guest-to-host     escape and code execution, via VIRGL_CCMD_RESOURCE_INLINE_WRITE commands. (CVE-2019-18389)

  - An out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in virglrenderer through     0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_BLIT commands. (CVE-2019-18390)

  - A heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer.c in     virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via     VIRGL_CCMD_RESOURCE_INLINE_WRITE commands. (CVE-2019-18391)

  - A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a     denial of service via commands that attempt to launch a grid without previously providing a Compute Shader     (CS). (CVE-2020-8002)

  - A double-free vulnerability in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a     denial of service by triggering texture allocation failure, because     vrend_renderer_resource_allocated_texture is not an appropriate place for a free. (CVE-2020-8003)

  - An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw     allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER     ioctl, leading to a denial of service or possible code execution. (CVE-2022-0135)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202210-05 (virglrenderer: Multiple vulnerabilities)

  - An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw     allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER     ioctl, leading to a denial of service or possible code execution. (CVE-2022-0135)

  - A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly     initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to     mmap from the guest kernel and read this uninitialized memory from the host, possibly leading to     information disclosure. (CVE-2022-0175)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2395-1 advisory.

  - An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw     allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER     ioctl, leading to a denial of service or possible code execution. (CVE-2022-0135)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 21.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5309-1 advisory.

  - An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw     allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER     ioctl, leading to a denial of service or possible code execution. (CVE-2022-0135)

  - A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly     initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to     mmap from the guest kernel and read this uninitialized memory from the host, possibly leading to     information disclosure. (CVE-2022-0175)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:0479-1 advisory.

  - An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw     allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER     ioctl, leading to a denial of service or possible code execution. (CVE-2022-0135)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0478-1 advisory.

  - An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw     allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER     ioctl, leading to a denial of service or possible code execution. (CVE-2022-0135)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0479-1 advisory.

  - An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw     allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER     ioctl, leading to a denial of service or possible code execution. (CVE-2022-0135)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
168487	Debian DLA-3232-1 : virglrenderer - LTS security update	Nessus	Debian Local Security Checks	high
166165	GLSA-202210-05 : virglrenderer: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
163239	SUSE SLES15 Security Update : virglrenderer (SUSE-SU-2022:2395-1)	Nessus	SuSE Local Security Checks	high
158458	Ubuntu 20.04 LTS : virglrenderer vulnerabilities (USN-5309-1)	Nessus	Ubuntu Local Security Checks	high
158236	openSUSE 15 Security Update : virglrenderer (openSUSE-SU-2022:0479-1)	Nessus	SuSE Local Security Checks	high
158153	SUSE SLES12 Security Update : virglrenderer (SUSE-SU-2022:0478-1)	Nessus	SuSE Local Security Checks	high
158144	SUSE SLES15 Security Update : virglrenderer (SUSE-SU-2022:0479-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2022-0135

high

Tenable Plugins

high

high

high

high

high

high

high