CVE-2019-18390: High severity freedesktop virglrenderer vulnerability
Published Oct 25, 2019
·Updated
An out-of-bounds read in the vrendblitneedswizzle function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGLCCMDBLIT commands.
Affected Software
4 affected components
Virglrenderer Project Virglrenderer<=0.8.0
openSUSE Leap=15.1
redhat Enterprise Linux=8.0
Debian Debian Linux=10.0
Remediation
Patch Available
Event History
Oct 25, 2019
Data Sourced
01:51 PM
DescriptionSeverityAffected Software
Dec 23, 2019
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is CVE-2019-18390?
CVE-2019-18390 is an out-of-bounds read vulnerability in the vrend_blit_need_swizzle function in virglrenderer through 0.8.0.
2
How does CVE-2019-18390 affect the Virglrenderer Project Virglrenderer?
CVE-2019-18390 affects Virglrenderer Project Virglrenderer through 0.8.0.
3
How does CVE-2019-18390 affect openSUSE Leap 15.1?
CVE-2019-18390 affects openSUSE Leap 15.1.
4
How does CVE-2019-18390 affect Redhat Enterprise Linux 8.0?
CVE-2019-18390 affects Redhat Enterprise Linux 8.0.
5
How does CVE-2019-18390 affect Debian Debian Linux 10.0?
CVE-2019-18390 affects Debian Debian Linux 10.0.
6
What is the severity of CVE-2019-18390?
CVE-2019-18390 has a severity of 7.1 (high).
7
How can I fix CVE-2019-18390?
To fix CVE-2019-18390, you should update Virglrenderer to a version higher than 0.8.0.