ZeroHour

CVE-2019-18391

CVSS 3.1
5.5 medium
EPSS
<1%p30
Published
()
Modified
Description

A heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_RESOURCE_INLINE_WRITE commands.

Vendors
virglrenderer projectopensuseredhatdebian
Products
virglrenderer, leap, enterprise linux, debian linux
Weakness
CWE-787
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.