Memory leak in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRGL_OBJECT_VERTEX_ELEMENTS commands.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade virglrenderer | Jul 30, 2024 | Mar 15, 2017 |
| Gentoo Linux | — | Upgrade media-libs/virglrenderer. | Oct 30, 2017 | Mar 15, 2017 |
| Huawei Euleros 2_0_sp8 | — | Upgrade virglrenderer-develUpgrade virglrenderer | Nov 3, 2020 | Mar 15, 2017 |
| Suse | — | Upgrade libvirglrenderer0Upgrade virglrenderer-devel | Mar 23, 2017 | Mar 15, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub