CVE-2015-5950

NameCVE-2015-5950
DescriptionThe NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304.128, R340 before 340.93, and R352 before 352.41 on Linux; and R352 before 352.46 on GRID vGPU and vSGA allows local users to write to an arbitrary kernel memory location and consequently gain privileges via a crafted ioctl call.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
NVD severitymedium (attack range: local)
Debian Bugs800566

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
nvidia-graphics-drivers (PTS)jessie/non-free340.106-1fixed
stretch/non-free384.130-1fixed
buster/non-free390.87-2fixed
sid/non-free390.87-3fixed
nvidia-graphics-drivers-legacy-304xx (PTS)jessie/non-free304.137-0~deb8u1fixed
stretch/non-free304.137-5~deb9u1fixed
sid/non-free304.137-5fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
nvidia-graphics-driverssource(unstable)340.93-1medium800566
nvidia-graphics-drivers-legacy-304xxsource(unstable)304.128-5medium
nvidia-graphics-drivers-legacy-304xxsourcejessie304.128-1medium

Notes

[jessie] - nvidia-graphics-drivers <no-dsa> (Non-free not supported)
[wheezy] - nvidia-graphics-drivers <no-dsa> (Non-free not supported)
[squeeze] - nvidia-graphics-drivers <no-dsa> (Non-free not supported)

Search for package or bug name: Reporting problems