Lucene search

K
archlinuxArch LinuxASA-201509-5
HistorySep 12, 2015 - 12:00 a.m.

libvdpau lib32vdpau: multiple issues

2015-09-1200:00:00
Arch Linux
lists.archlinux.org
16

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.7%

  • CVE-2015-5198 (Local Privilege Escalation)

When used in a setuid or setgid application, libvdpau/lib32-libvdpau allows
local users to gain privileges via unspecified vectors, related to the
VDPAU_DRIVER_PATH environment variable.

  • CVE-2015-5199 (Directory Traversal)

Directory traversal vulnerability in dlopen in libvdpau/lib32/libvdpau allows
local users to gain privileges via the VDPAU_DRIVER environment variable.

  • CVE-2015-5200 (Directory Traversal)

The trace functionality in libvdpau/lib32-libvdpau, when used in a setuid or
setgid application, allows local users to write to arbitrary files via
unspecified vectors.

OSVersionArchitecturePackageVersionFilename
anyanyanylib32-libvdpau< 1.1.1-1UNKNOWN
anyanyanylibvdpau< 1.1.1-1UNKNOWN

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.7%