PT-2015-2749 · Nvidia+1 · Nvidia Gpu Graphics Driver+1

Published 2015-11-18 · Updated 2019-02-13 · CVE-2015-7869

Positive Technologies (AI Summary)

CVSS v2.0

6.6

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:P/A:C

Name of the Vulnerable Software and Affected Versions NVIDIA GPU graphics driver versions R340 through 341.92 NVIDIA GPU graphics driver versions R352 through 354.35 NVIDIA GPU graphics driver versions R358 through 358.87 NVIDIA GPU graphics driver versions R304 through 304.131 NVIDIA GPU graphics driver versions R340 through 340.96 NVIDIA GPU graphics driver versions R352 through 352.63 NVIDIA GPU graphics driver versions R358 through 358.16

Description The issue is related to integer overflows in the kernel mode driver for the NVIDIA GPU graphics driver. Exploitation of this issue may allow a local attacker to access sensitive information, elevate privileges, or cause a denial of service. This can be achieved through unknown vectors that trigger uninitialized or out of bounds memory access.

Recommendations For versions R340 through 341.92, update to version 341.92 or later. For versions R352 through 354.35, update to version 354.35 or later. For versions R358 through 358.87, update to version 358.87 or later. For versions R304 through 304.131, update to version 304.131 or later. For versions R340 through 340.96, update to version 340.96 or later. For versions R352 through 352.63, update to version 352.63 or later. For versions R358 through 358.16, update to version 358.16 or later.

Fix

DoS

Weakness Enumeration

CWE-189

Related Identifiers

BDU:2015-12114

CVE-2015-7869

USN-2814-1

Affected Products

Nvidia Gpu Graphics Driver

Ubuntu

References · 16

• https://security-tracker.debian.org/tracker/CVE-2015-7869 · Vendor Advisory
• http://ubuntu.com/usn/usn-2814-1 · Vendor Advisory
• http://nvidia.custhelp.com/app/answers/detail/a_id/3808/kw/security · Vendor Advisory
• https://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04971867 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-7869 · Security Note
• https://osv.dev/vulnerability/USN-2814-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-7869 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2015-7869 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2814-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-12114 · Security Note
• https://ubuntu.com/security/CVE-2015-7869 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-7869 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-7869 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7869 · Security Note
• http://nvidia.custhelp.com/app/answers/detail/a_id/3808 · Note