CVE-2019-18391: Buffer Overflow
Published Oct 25, 2019
·Updated
A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGLCCMDRESOURCEINLINEWRITE commands.
Affected Software
4 affected components
Virglrenderer Project Virglrenderer<=0.8.0
openSUSE Leap=15.1
redhat Enterprise Linux=8.0
Debian Debian Linux=10.0
Remediation
Patch Available
Event History
Oct 25, 2019
Data Sourced
02:04 PM
DescriptionSeverityAffected Software
Dec 23, 2019
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-18391?
The severity of CVE-2019-18391 is high with a severity value of 5.5.
2
How does CVE-2019-18391 affect Virglrenderer Project Virglrenderer?
CVE-2019-18391 affects Virglrenderer Project Virglrenderer versions up to and including 0.8.0.
3
How does CVE-2019-18391 affect openSUSE Leap?
CVE-2019-18391 affects openSUSE Leap version 15.1.
4
How does CVE-2019-18391 affect Redhat Enterprise Linux?
CVE-2019-18391 affects Redhat Enterprise Linux version 8.0.
5
How does CVE-2019-18391 affect Debian Debian Linux?
CVE-2019-18391 affects Debian Debian Linux version 10.0.
6
How can I fix the CVE-2019-18391 vulnerability?
To fix the CVE-2019-18391 vulnerability, update Virglrenderer Project Virglrenderer to version 0.8.1 or later.