Summary
It was discovered that the NVIDIA graphics drivers incorrectly handled GLX
indirect rendering support. An attacker able to connect to an X server,
either locally or remotely, could use these issues to cause the X server to
crash or execute arbitrary code resulting in possible privilege escalation.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | nvidia-graphics-drivers-304 | 304.125-0ubuntu0.0.1 |
| Ubuntu · 14.04 LTS 14.04:LTS | nvidia-graphics-drivers-304-updates | 304.125-0ubuntu0.0.1 |
| Ubuntu · 14.04 LTS 14.04:LTS | nvidia-graphics-drivers-331 | 331.113-0ubuntu0.0.4 |
| Ubuntu · 14.04 LTS 14.04:LTS | nvidia-graphics-drivers-331-updates | 331.113-0ubuntu0.0.4 |
Vulnerabilities 3
-
Unscored —
X.Org X Window System (aka X11 and X) X11R5 and X.Org Server (aka xserver and xorg-server) before 1.16.3, when using SU…
-
Unscored —
The GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-…
-
Unscored —
The NVIDIA Linux Discrete GPU drivers before R304.125, R331.x before R331.113, R340.x before R340.65, R343.x before R34…