The vrend_draw_vbo function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors involving vertext_buffer_index.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | debian-upgrade-virglrenderer | Jul 30, 2024 | Mar 20, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-media-libs-virglrenderer | Oct 30, 2017 | Mar 20, 2017 | |
| Suse | — | suse-upgrade-libvirglrenderer0suse-upgrade-virglrenderer-devel | Mar 23, 2017 | Mar 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub