An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER ioctl, leading to a denial of service or possible code execution.

The version of virglrenderer installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-0135 advisory.

  - An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw     allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER     ioctl, leading to a denial of service or possible code execution. (CVE-2022-0135)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3232 advisory.

  - A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to     cause a denial of service via malformed commands. (CVE-2019-18388)

  - A heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer.c in     virglrenderer through 0.8.0 allows guest OS users to cause a denial of service, or QEMU guest-to-host     escape and code execution, via VIRGL_CCMD_RESOURCE_INLINE_WRITE commands. (CVE-2019-18389)

  - An out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in virglrenderer through     0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_BLIT commands. (CVE-2019-18390)

  - A heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer.c in     virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via     VIRGL_CCMD_RESOURCE_INLINE_WRITE commands. (CVE-2019-18391)

  - A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a     denial of service via commands that attempt to launch a grid without previously providing a Compute Shader     (CS). (CVE-2020-8002)

  - A double-free vulnerability in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a     denial of service by triggering texture allocation failure, because     vrend_renderer_resource_allocated_texture is not an appropriate place for a free. (CVE-2020-8003)

  - An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw     allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER     ioctl, leading to a denial of service or possible code execution. (CVE-2022-0135)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202210-05 (virglrenderer: Multiple vulnerabilities)

  - An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw     allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER     ioctl, leading to a denial of service or possible code execution. (CVE-2022-0135)

  - A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly     initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to     mmap from the guest kernel and read this uninitialized memory from the host, possibly leading to     information disclosure. (CVE-2022-0175)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2395-1 advisory.

  - An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw     allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER     ioctl, leading to a denial of service or possible code execution. (CVE-2022-0135)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5309-1 advisory.

    It was discovered that virglrenderer incorrectly handled memory. An attacker inside a guest could use this     issue to cause virglrenderer to crash, resulting in a denial of service, or possibly execute arbitrary     code. (CVE-2022-0135)

    It was discovered that virglrenderer incorrectly initialized memory. An attacker inside a guest could     possibly use this issue to obtain sensitive host information. (CVE-2022-0175)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:0479-1 advisory.

  - An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw     allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER     ioctl, leading to a denial of service or possible code execution. (CVE-2022-0135)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0478-1 advisory.

  - An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw     allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER     ioctl, leading to a denial of service or possible code execution. (CVE-2022-0135)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0479-1 advisory.

  - An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw     allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER     ioctl, leading to a denial of service or possible code execution. (CVE-2022-0135)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
201790	CBL Mariner 2.0 Security Update: virglrenderer (CVE-2022-0135)	Nessus	MarinerOS Local Security Checks	high
168487	Debian DLA-3232-1 : virglrenderer - LTS security update	Nessus	Debian Local Security Checks	high
166165	GLSA-202210-05 : virglrenderer: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
163239	SUSE SLES15 Security Update : virglrenderer (SUSE-SU-2022:2395-1)	Nessus	SuSE Local Security Checks	high
158458	Ubuntu 20.04 LTS : virglrenderer vulnerabilities (USN-5309-1)	Nessus	Ubuntu Local Security Checks	high
158236	openSUSE 15 Security Update : virglrenderer (openSUSE-SU-2022:0479-1)	Nessus	SuSE Local Security Checks	high
158153	SUSE SLES12 Security Update : virglrenderer (SUSE-SU-2022:0478-1)	Nessus	SuSE Local Security Checks	high
158144	SUSE SLES15 Security Update : virglrenderer (SUSE-SU-2022:0479-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2022-0135

high

Tenable Plugins

high

high

high

high

high

high

high

high