[arch-security] [ASA-201412-12] nvidia: arbitrary code execution
anthraxx at archlinux.org
Fri Dec 12 02:58:35 UTC 2014
Arch Linux Security Advisory ASA-201412-12
Date : 2014-12-12
CVE-ID : CVE-2014-8091 CVE-2014-8098 CVE-2014-8298
Package : nvidia nvidia-lts
Type : arbitrary code execution
Remote : Yes
Link : https://wiki.archlinux.org/index.php/CVE-2014
The packages nvidia and nvidia-lts before version 343.36-1 are
vulnerable to arbitrary code execution or denial of service.
Upgrade to 343.36-1.
# pacman -Syu "nvidia>=343.36-1"
# pacman -Syu "nvidia-lts>=343.36-1"
The problems have been fixed upstream in version 343.36.
It was discovered that the NVIDIA graphics drivers incorrectly handled
GLX indirect rendering support. An attacker able to connect to an X
server, either locally or remotely, could use these issues to cause the
X server to crash or execute arbitrary code resulting in possible
An attacker able to connect to an X server, either locally or remotely,
could use these issues to cause the X server to crash or execute
arbitrary code resulting in possible privilege escalation.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 819 bytes
Desc: OpenPGP digital signature
More information about the arch-security