CVE-2015-5198

CVE-2015-5198 affects libvdpau up to 1.1.0 (pre-1.1.1). In scenarios where libvdpau is loaded by a setuid or setgid process, privilege escalation is possible due to improper handling of environment variables, notably VDPAU_DRIVER_PATH. Public documentation in connected sources confirms vulnerabil...

CVE-2015-5200

CVE-2015-5200 pertains to libvdpau’s trace functionality in versions before 1.1.1. When libvdpau is used in a setuid/setgid application, local users can exploit this by writing to arbitrary files via unspecified vectors, as described across multiple advisories. Affected software is the libvdpau l...

CVE-2015-5199

CVE-2015-5199 : A directory traversal vulnerability in libvdpau’s dlopen path allows local privilege escalation via the VDPAU_DRIVER environment variable, affecting libvdpau versions prior to 1.1.1. The incident is documented across multiple distributions (Fedora, SUSE/openSUSE, Mageia, Fedora up...