Lucene search

K
archlinuxArch LinuxASA-201412-10
HistoryDec 12, 2014 - 12:00 a.m.

nvidia-304xx: arbitrary code execution

2014-12-1200:00:00
Arch Linux
lists.archlinux.org
28

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.063 Low

EPSS

Percentile

92.9%

It was discovered that the NVIDIA graphics drivers incorrectly handled
GLX indirect rendering support. An attacker able to connect to an X
server, either locally or remotely, could use these issues to cause the
X server to crash or execute arbitrary code resulting in possible
privilege escalation.

OSVersionArchitecturePackageVersionFilename
anyanyanynvidia-304xx-lts< 304.125-1UNKNOWN
anyanyanynvidia-304xx< 304.125-1UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.063 Low

EPSS

Percentile

92.9%