PT-2015-7095 · Nvidia+2 · Nvidia Gpu Display Driver+2

Dario Weisser · Publicado 2015-09-01 · Atualizado 2016-12-08 · CVE-2015-5950

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NVIDIA display driver R352 versions prior to 353.82 NVIDIA display driver R340 versions prior to 341.81 NVIDIA display driver R304 versions prior to 304.128 NVIDIA display driver R340 versions prior to 340.93 NVIDIA display driver R352 versions prior to 352.41 NVIDIA display driver R352 versions prior to 352.46 on GRID vGPU and vSGA

Description The issue allows local users to write to an arbitrary kernel memory location, which can lead to gaining privileges via a crafted ioctl call.

Recommendations For NVIDIA display driver R352 versions prior to 353.82, update to version 353.82 or later. For NVIDIA display driver R340 versions prior to 341.81, update to version 341.81 or later. For NVIDIA display driver R304 versions prior to 304.128, update to version 304.128 or later. For NVIDIA display driver R340 versions prior to 340.93, update to version 340.93 or later. For NVIDIA display driver R352 versions prior to 352.41, update to version 352.41 or later. For NVIDIA display driver R352 versions prior to 352.46 on GRID vGPU and vSGA, update to version 352.46 or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2015-1745

ALT-PU-2015-1747

ALT-PU-2015-1835

CVE-2015-5950

MGASA-2015-0407

USN-2747-1

Produtos afetados

Alt Linux

Nvidia Gpu Display Driver

Ubuntu

Referências · 23

• https://security-tracker.debian.org/tracker/CVE-2015-5950 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-5950 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2015-0407.html · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2015-5950 · Nota de Segurança
• http://nvidia.custhelp.com/app/answers/detail/a_id/3763/~/cve-2015-5950-memory-corruption-due-to-an-unsanitized-pointer-in-the-nvidia · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2015-5950 · Aviso do Fabricante
• https://support.lenovo.com/us/en/product_security/len_3313 · Nota
• https://packages.altlinux.org/ru/vuln/CVE-2015-5950 · Nota
• https://errata.altlinux.org/ALT-PU-2015-1835 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=16903 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5950 · Nota de Segurança
• http://ubuntu.com/usn/USN-2747-1 · Aviso do Fabricante
• https://errata.altlinux.org/ALT-PU-2015-1747 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-2747-1 · Aviso do Fabricante
• https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04815468 · Nota