virglrenderer (SUSE:Linux Enterprise Server 12 SP2) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server 12 SP2 package virglrenderer, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (13)

• CVE-2017-5580 — CVSS 7.1 (high): The parse_instruction function in gallium/auxiliary/tgsi/tgsi_text.c in virglrenderer before 0.6.0 allows local guest OS users to cause a…
• CVE-2016-10214 — CVSS 6.5 (medium): Memory leak in the virgl_resource_attach_backing function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of…
• CVE-2017-5937 — CVSS 6.5 (medium): The util_format_is_pure_uint function in vrend_renderer.c in Virgil 3d project (aka virglrenderer) 0.6.0 and earlier allows local guest OS…
• CVE-2017-6386 — CVSS 6.5 (medium): Memory leak in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer allows local guest OS users to cause a…
• CVE-2017-6209 — CVSS 6.5 (medium): Stack-based buffer overflow in the parse_identifier function in tgsi_text.c in the TGSI auxiliary module in the Gallium driver in…
• CVE-2017-6210 — CVSS 6.5 (medium): The vrend_decode_reset function in vrend_decode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service…
• CVE-2017-6317 — CVSS 6.5 (medium): Memory leak in the add_shader_program function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a…
• CVE-2016-10163 — CVSS 6.5 (medium): Memory leak in the vrend_renderer_context_create_internal function in vrend_decode.c in virglrenderer before 0.6.0 allows local guest OS…
• CVE-2017-5993 — CVSS 6.5 (medium): Memory leak in the vrend_renderer_init_blit_ctx function in vrend_blitter.c in virglrenderer before 0.6.0 allows local guest OS users to…
• CVE-2017-5956 — CVSS 5.5 (medium): The vrend_draw_vbo function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array…
• CVE-2017-5957 — CVSS 5.5 (medium): Stack-based buffer overflow in the vrend_decode_set_framebuffer_state function in vrend_decode.c in virglrenderer before…
• CVE-2017-6355 — CVSS 5.5 (medium): Integer overflow in the vrend_create_shader function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause…
• CVE-2017-5994 — CVSS 5.5 (medium): Heap-based buffer overflow in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer before 0.6.0 allows…