Skip to content
OpenAdvisories
Unscored CVE-2015-5199 EUVD-2015-5200GHSA-gfjj-596m-mjf9

Directory traversal vulnerability in dlopen in libvdpau before 1.1.1 allows local users to gain privileges via the VDPAU_DRIVER environment…

Published Sep 8, 2015 · Updated Aug 6, 2024 · Assigned by redhat

Package: libvdpau Package: libvdpau Ecosystem: Debian Ecosystem: Ubuntu

Description

Directory traversal vulnerability in dlopen in libvdpau before 1.1.1 allows local users to gain privileges via the VDPAU_DRIVER environment variable.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 libvdpau 1.1.1-1 —
Debian 13 libvdpau 1.1.1-1 —
Debian 12 libvdpau 1.1.1-1 —
Debian 8 libvdpau 0.8-3+deb8u1 DSA-3355-1
Debian 7 libvdpau 0.4.1-7+deb7u1 DSA-3355-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Debian 6.0 libvdpau 0.4.1-2+deb6u1 DLA-306-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 14.04 LTS libvdpau 0.7-1ubuntu0.1 USN-2729-1

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 12 libvdpau 0.8-3.1 SUSE-SU-2015:1892-1
SLES 11 SP4 libvdpau 0.4.1-16.20.2 SUSE-SU-2015:1925-1
SLES 11 SP3 libvdpau 0.4.1-16.20.2 SUSE-SU-2015:1925-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 12 libvdpau 0.8-3.1 SUSE-SU-2015:1892-1

Advisories 5

References