CVE-2019-18388

Опубликовано: 23 дек. 2019

Источник: nvd

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via malformed commands.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00028.html
Third Party Advisory
https://access.redhat.com/security/cve/cve-2019-18388
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1765578
Issue Tracking
Patch
Third Party Advisory
https://gitlab.freedesktop.org/virgl/virglrenderer/commit/0d9a2c88dc3a70023541b3260b9f00c982abda16
Patch
Third Party Advisory
https://gitlab.freedesktop.org/virgl/virglrenderer/merge_requests/314/diffs?commit_id=d2cdbcf6a8f2317f250fd54f08aa35dde2fa3e30#diff-content-3cd772559e0d73afa136d6818023cfd0c4c8ecc0
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/12/msg00017.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00028.html
Third Party Advisory
https://access.redhat.com/security/cve/cve-2019-18388
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1765578
Issue Tracking
Patch
Third Party Advisory
https://gitlab.freedesktop.org/virgl/virglrenderer/commit/0d9a2c88dc3a70023541b3260b9f00c982abda16
Patch
Third Party Advisory
https://gitlab.freedesktop.org/virgl/virglrenderer/merge_requests/314/diffs?commit_id=d2cdbcf6a8f2317f250fd54f08aa35dde2fa3e30#diff-content-3cd772559e0d73afa136d6818023cfd0c4c8ecc0
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/12/msg00017.html
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:virglrenderer_project:virglrenderer:*:*:*:*:*:*:*:*

Версия до 0.8.0 (включая)

Конфигурация 2

cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 31%

0.00118

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2019-18388

CVSS3: 5.5

ubuntu

около 6 лет назад

A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via malformed commands.

CVE-2019-18388

CVSS3: 3.3

redhat

больше 6 лет назад

A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via malformed commands.

CVE-2019-18388

CVSS3: 5.5

debian

около 6 лет назад

A NULL pointer dereference in vrend_renderer.c in virglrenderer throug ...

GHSA-fxr5-768h-qw68

CVSS3: 5.5

github

больше 3 лет назад

A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via malformed commands.

BDU:2023-00916

CVSS3: 5.5

fstec

больше 6 лет назад

Уязвимость компонента vrend_renderer.c виртуального OpenGL рендерера Virglrenderer, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 31%

0.00118

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-476