CVE:CVE-2019-18389
CNNVD:CNNVD-201912-1011
virglrenderer是一款VirGL虚拟OpenGL渲染器。
virglrenderer 0.8.0及之前版本中的vrend_renderer.c文件的‘vrend_renderer_transfer_write_iov’函数存在缓冲区错误漏洞。本地攻击者可借助VIRGL_CCMD_RESOURCE_INLINE_WRITE命令利用该漏洞导致拒绝服务（应用程序崩溃）或执行任意代码。
solution:Upgrade virglrenderer_project virglrenderer to a higher version than 0.8.0,and avoid the version (,0.8.0]; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0