Lucene search
UbuntuUSN-2814-1HistoryNov 18, 2015 - 12:00 a.m.
NVIDIA graphics drivers vulnerability
2015-11-1800:00:00
ubuntu.com
30
6.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
PARTIAL
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:P/A:C
6.3 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Releases
- Ubuntu 15.10
- Ubuntu 15.04
- Ubuntu 14.04 ESM
- Ubuntu 12.04
Packages
- nvidia-graphics-drivers-304 - NVIDIA binary X.Org driver
- nvidia-graphics-drivers-304-updates - NVIDIA binary X.Org driver
- nvidia-graphics-drivers-340 - NVIDIA binary X.Org driver
- nvidia-graphics-drivers-340-updates - NVIDIA binary X.Org driver
- nvidia-graphics-drivers-352 - NVIDIA binary X.Org driver
- nvidia-graphics-drivers-352-updates - NVIDIA binary X.Org driver
Details
It was discovered that the NVIDIA graphics drivers incorrectly sanitized
user mode inputs. A local attacker could use this issue to possibly gain
root privileges.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 15.10 | noarch | nvidia-304 | < 304.131-0ubuntu0.15.10.1 | UNKNOWN |
| Ubuntu | 15.10 | noarch | libcuda1-304 | < 304.131-0ubuntu0.15.10.1 | UNKNOWN |
| Ubuntu | 15.10 | noarch | nvidia-304-dev | < 304.131-0ubuntu0.15.10.1 | UNKNOWN |
| Ubuntu | 15.10 | noarch | nvidia-current | < 304.131-0ubuntu0.15.10.1 | UNKNOWN |
| Ubuntu | 15.10 | noarch | nvidia-current-dev | < 304.131-0ubuntu0.15.10.1 | UNKNOWN |
| Ubuntu | 15.10 | noarch | nvidia-libopencl1-304 | < 304.131-0ubuntu0.15.10.1 | UNKNOWN |
| Ubuntu | 15.10 | noarch | nvidia-opencl-icd-304 | < 304.131-0ubuntu0.15.10.1 | UNKNOWN |
| Ubuntu | 15.10 | noarch | nvidia-304-updates | < 304.131-0ubuntu0.15.10.1 | UNKNOWN |
| Ubuntu | 15.10 | noarch | nvidia-331 | < 340.96-0ubuntu0.15.10.1 | UNKNOWN |
| Ubuntu | 15.10 | noarch | libcuda1-331 | < 340.96-0ubuntu0.15.10.1 | UNKNOWN |
References
Related
nessus
nessus
openvas
openvas
Ubuntu: Security Advisory (USN-2814-1)
2015-11-19 00:00:00
cvelist
cvelist
CVE-2015-7869
2015-11-24 20:00:00
CVE-2015-8328
2015-11-24 20:00:00
cve
cve
CVE-2015-8328
2015-11-24 20:59:23
CVE-2015-7869
2015-11-24 20:59:13
ubuntucve
ubuntucve
CVE-2015-7869
2015-11-18 00:00:00
CVE-2015-8328
2015-11-24 00:00:00
debiancve
debiancve
CVE-2015-7869
2015-11-24 20:59:13
CVE-2015-8328
2015-11-24 20:59:23
prion
prion
Code injection
2015-11-24 20:59:00
Integer overflow
2015-11-24 20:59:00
nvd
nvd
CVE-2015-7869
2015-11-24 20:59:13
CVE-2015-8328
2015-11-24 20:59:23
lenovo
lenovo
Memory corruption due to an unsanitized pointer in the NVIDIA display driver
2016-08-14 00:00:00
6.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
PARTIAL
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:P/A:C
6.3 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for USN-2814-1