Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:0479-1

Опубликовано: 17 фев. 2022
Источник: suse-cvrf

Описание

Security update for virglrenderer

This update for virglrenderer fixes the following issues:

  • CVE-2022-0135: Fixed out-of-bonds write in read_transfer_data() (bsc#1195389).

Список пакетов

SUSE Enterprise Storage 6
libvirglrenderer0-0.6.0-4.9.1
virglrenderer-devel-0.6.0-4.9.1
SUSE Enterprise Storage 7
libvirglrenderer0-0.6.0-4.9.1
virglrenderer-devel-0.6.0-4.9.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS
libvirglrenderer0-0.6.0-4.9.1
virglrenderer-devel-0.6.0-4.9.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS
libvirglrenderer0-0.6.0-4.9.1
virglrenderer-devel-0.6.0-4.9.1
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS
libvirglrenderer0-0.6.0-4.9.1
virglrenderer-devel-0.6.0-4.9.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS
libvirglrenderer0-0.6.0-4.9.1
virglrenderer-devel-0.6.0-4.9.1
SUSE Linux Enterprise High Performance Computing 15-ESPOS
libvirglrenderer0-0.6.0-4.9.1
virglrenderer-devel-0.6.0-4.9.1
SUSE Linux Enterprise High Performance Computing 15-LTSS
libvirglrenderer0-0.6.0-4.9.1
virglrenderer-devel-0.6.0-4.9.1
SUSE Linux Enterprise Micro 5.0
libvirglrenderer0-0.6.0-4.9.1
SUSE Linux Enterprise Module for Server Applications 15 SP3
libvirglrenderer0-0.6.0-4.9.1
virglrenderer-devel-0.6.0-4.9.1
SUSE Linux Enterprise Real Time 15 SP2
libvirglrenderer0-0.6.0-4.9.1
virglrenderer-devel-0.6.0-4.9.1
SUSE Linux Enterprise Server 15 SP1-BCL
libvirglrenderer0-0.6.0-4.9.1
virglrenderer-devel-0.6.0-4.9.1
SUSE Linux Enterprise Server 15 SP1-LTSS
libvirglrenderer0-0.6.0-4.9.1
virglrenderer-devel-0.6.0-4.9.1
SUSE Linux Enterprise Server 15 SP2-BCL
libvirglrenderer0-0.6.0-4.9.1
virglrenderer-devel-0.6.0-4.9.1
SUSE Linux Enterprise Server 15 SP2-LTSS
libvirglrenderer0-0.6.0-4.9.1
virglrenderer-devel-0.6.0-4.9.1
SUSE Linux Enterprise Server 15-LTSS
libvirglrenderer0-0.6.0-4.9.1
virglrenderer-devel-0.6.0-4.9.1
SUSE Linux Enterprise Server for SAP Applications 15
libvirglrenderer0-0.6.0-4.9.1
virglrenderer-devel-0.6.0-4.9.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
libvirglrenderer0-0.6.0-4.9.1
virglrenderer-devel-0.6.0-4.9.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2
libvirglrenderer0-0.6.0-4.9.1
virglrenderer-devel-0.6.0-4.9.1
SUSE Manager Proxy 4.1
libvirglrenderer0-0.6.0-4.9.1
virglrenderer-devel-0.6.0-4.9.1
SUSE Manager Retail Branch Server 4.1
libvirglrenderer0-0.6.0-4.9.1
virglrenderer-devel-0.6.0-4.9.1
SUSE Manager Server 4.1
libvirglrenderer0-0.6.0-4.9.1
virglrenderer-devel-0.6.0-4.9.1

Описание

An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER ioctl, leading to a denial of service or possible code execution.


Затронутые продукты
SUSE Enterprise Storage 6:libvirglrenderer0-0.6.0-4.9.1
SUSE Enterprise Storage 6:virglrenderer-devel-0.6.0-4.9.1
SUSE Enterprise Storage 7:libvirglrenderer0-0.6.0-4.9.1
SUSE Enterprise Storage 7:virglrenderer-devel-0.6.0-4.9.1

Ссылки
Уязвимость SUSE-SU-2022:0479-1