Vulnerability-Lookup

BDU:2015-12114 (CVE-2015-7869)

Vulnerability from fstec – Published: 2015-12-14 – Updated: 2021-03-23 – View on bdu.fstec.ru Fixed

Title

Уязвимость программного обеспечения графического процессора NVIDIA GPU, позволяющая нарушителю получить доступ к защищаемой информации, повысить свои привилегии или вызвать отказ в обслуживании

Summary

Уязвимость программного обеспечения графического процессора NVIDIA GPU связана с целочисленным переполнением. Эксплуатация уязвимости может позволить нарушителю, действующему локально, получить доступ к защищаемой информации, повысить свои привилегии или вызвать отказ в обслуживании

Severity

6.6 (Medium) CVSS 2.0


                      
                        AV:L/AC:M/Au:N/C:C/I:P/A:C

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Being clarified

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-189 - Ошибки, возникающие при обработке чисел

Aliases

CVE-2015-7869, USN-2814-1, SECURITY, TRACKER, ID:1034176

References

3 references

URL
http://ubuntu.com/usn/usn-2814-1
http://securitytracker.com/id/1034176
http://nvidia.custhelp.com/app/answers/detail/a_id/3808/kw/security

Impacted products

1 product from 1 vendor

Vendors

NVIDIA Corp.

Products

NVIDIA GPU

Versions

до 341.92 (NVIDIA GPU), до 354.35 (NVIDIA GPU), до 358.87 (NVIDIA GPU), до 304.131 (NVIDIA GPU), до 340.96 (NVIDIA GPU), до 352.63 (NVIDIA GPU), до 358.16 (NVIDIA GPU)

Product types

Application software

Platforms

Сообщество свободного программного обеспечения Linux . 64-bit, Сообщество свободного программного обеспечения Linux . 32-bit, Microsoft Corp Windows - 64-bit, Microsoft Corp Windows - 32-bit

Mitigations

Обновление программного обеспечения для операционной системы Windows до версии 358.87 или новее для линейки R358, до версии 354.35 или новее для линейки R352, до версии 341.92 или новее для линейки R340. Обновление программного обеспечения для операционной системы Linux до версии 358.16 или новее для линейки R358, до версии 352.63 или новее для линейки R352, до версии 340.96 или новее для линейки R340, до версии 304.131 или новее для линейки R304

Credits

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:M/Au:N/C:C/I:P/A:C",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "NVIDIA Corp.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 341.92 (NVIDIA GPU), \u0434\u043e 354.35 (NVIDIA GPU), \u0434\u043e 358.87 (NVIDIA GPU), \u0434\u043e 304.131 (NVIDIA GPU), \u0434\u043e 340.96 (NVIDIA GPU), \u0434\u043e 352.63 (NVIDIA GPU), \u0434\u043e 358.16 (NVIDIA GPU)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Windows \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 358.87 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435 \u0434\u043b\u044f \u043b\u0438\u043d\u0435\u0439\u043a\u0438 R358, \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 354.35 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435 \u0434\u043b\u044f \u043b\u0438\u043d\u0435\u0439\u043a\u0438 R352, \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 341.92 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435 \u0434\u043b\u044f \u043b\u0438\u043d\u0435\u0439\u043a\u0438 R340. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 358.16 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435 \u0434\u043b\u044f \u043b\u0438\u043d\u0435\u0439\u043a\u0438 R358, \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 352.63 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435 \u0434\u043b\u044f \u043b\u0438\u043d\u0435\u0439\u043a\u0438 R352, \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 340.96 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435 \u0434\u043b\u044f \u043b\u0438\u043d\u0435\u0439\u043a\u0438 R340, \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 304.131 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435 \u0434\u043b\u044f \u043b\u0438\u043d\u0435\u0439\u043a\u0438 R304",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "24.11.2015",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "23.03.2021",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "14.12.2015",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-12114",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2015-7869, USN-2814-1, Security Tracker ID:1034176",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "NVIDIA GPU",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux . 64-bit, \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux . 32-bit, Microsoft Corp Windows - 64-bit, Microsoft Corp Windows - 32-bit",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 NVIDIA GPU, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438\u043b\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0447\u0438\u0441\u0435\u043b (CWE-189)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 NVIDIA GPU \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u043c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438\u043b\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": "-",
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://ubuntu.com/usn/usn-2814-1\nhttp://securitytracker.com/id/1034176\nhttp://nvidia.custhelp.com/app/answers/detail/a_id/3808/kw/security",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-189",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,6)"
}

CVE-2015-7869 (GCVE-0-2015-7869)

Vulnerability from cvelistv5 – Published: 2015-11-24 20:00 – Updated: 2024-08-06 08:06

Summary

Multiple integer overflows in the kernel mode driver for the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows and R304 before 304.131, R340 before 340.96, R352 before 352.63, and R358 before 358.16 on Linux allow local users to obtain sensitive information, cause a denial of service (crash), or possibly gain privileges via unknown vectors, which trigger uninitialized or out of bounds memory access. NOTE: this identifier has been SPLIT per ADT2 and ADT3 due to different vulnerability type and affected versions. See CVE-2015-8328 for the vulnerability in the NVAPI support layer in NVIDIA drivers for Windows.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

4 references

URL	Tags
http://securitytracker.com/id/1034176	vdb-entryx_refsource_SECTRACK
https://h20565.www2.hp.com/portal/site/hpsc/publi…	vendor-advisoryx_refsource_HP
http://nvidia.custhelp.com/app/answers/detail/a_i…	x_refsource_CONFIRM
http://ubuntu.com/usn/usn-2814-1	vendor-advisoryx_refsource_UBUNTU

Date Public

2015-11-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T08:06:30.242Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1034176",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id/1034176"
          },
          {
            "name": "HPSBHF03545",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "https://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04971867"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/3808/kw/security"
          },
          {
            "name": "USN-2814-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-2814-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-11-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple integer overflows in the kernel mode driver for the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows and R304 before 304.131, R340 before 340.96, R352 before 352.63, and R358 before 358.16 on Linux allow local users to obtain sensitive information, cause a denial of service (crash), or possibly gain privileges via unknown vectors, which trigger uninitialized or out of bounds memory access.  NOTE: this identifier has been SPLIT per ADT2 and ADT3 due to different vulnerability type and affected versions. See CVE-2015-8328 for the vulnerability in the NVAPI support layer in NVIDIA drivers for Windows."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-08-12T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1034176",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id/1034176"
        },
        {
          "name": "HPSBHF03545",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "https://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04971867"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/3808/kw/security"
        },
        {
          "name": "USN-2814-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-2814-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-7869",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple integer overflows in the kernel mode driver for the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows and R304 before 304.131, R340 before 340.96, R352 before 352.63, and R358 before 358.16 on Linux allow local users to obtain sensitive information, cause a denial of service (crash), or possibly gain privileges via unknown vectors, which trigger uninitialized or out of bounds memory access.  NOTE: this identifier has been SPLIT per ADT2 and ADT3 due to different vulnerability type and affected versions. See CVE-2015-8328 for the vulnerability in the NVAPI support layer in NVIDIA drivers for Windows."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1034176",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id/1034176"
            },
            {
              "name": "HPSBHF03545",
              "refsource": "HP",
              "url": "https://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04971867"
            },
            {
              "name": "http://nvidia.custhelp.com/app/answers/detail/a_id/3808/kw/security",
              "refsource": "CONFIRM",
              "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/3808/kw/security"
            },
            {
              "name": "USN-2814-1",
              "refsource": "UBUNTU",
              "url": "http://ubuntu.com/usn/usn-2814-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-7869",
    "datePublished": "2015-11-24T20:00:00.000Z",
    "dateReserved": "2015-10-19T00:00:00.000Z",
    "dateUpdated": "2024-08-06T08:06:30.242Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

USN-2814-1 (UBUNTU-CVE-2015-7869)

Vulnerability from osv_ubuntu – Published: 2015-11-18 17:53 – Updated: 2026-04-22 07:36 – Source website

Summary

nvidia-graphics-drivers-304, nvidia-graphics-drivers-304-updates, nvidia-graphics-drivers-340, nvidia-graphics-drivers-340-updates, nvidia-graphics-drivers-352, nvidia-graphics-drivers-352-updates vulnerability

Details

It was discovered that the NVIDIA graphics drivers incorrectly sanitized user mode inputs. A local attacker could use this issue to possibly gain root privileges.

References

URL

Type

	https://ubuntu.com/security/notices/USN-2814-1	ADVISORY
	https://ubuntu.com/security/CVE-2015-7869	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2015-7869",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libcuda1-304",
            "binary_version": "304.131-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-304",
            "binary_version": "304.131-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-current",
            "binary_version": "304.131-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-libopencl1-304",
            "binary_version": "304.131-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-opencl-icd-304",
            "binary_version": "304.131-0ubuntu0.14.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "nvidia-graphics-drivers-304",
        "purl": "pkg:deb/ubuntu/nvidia-graphics-drivers-304@304.131-0ubuntu0.14.04.1?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "304.131-0ubuntu0.14.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "304.88-0ubuntu8",
        "304.88-0ubuntu9",
        "304.88-0ubuntu10",
        "304.88-0ubuntu11",
        "304.116-0ubuntu1",
        "304.116-0ubuntu2",
        "304.117-0ubuntu1",
        "304.125-0ubuntu0.0.1",
        "304.125-0ubuntu0.0.2",
        "304.128-0ubuntu0.0.1"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2015-7869",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libcuda1-304-updates",
            "binary_version": "304.131-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-304-updates",
            "binary_version": "304.131-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-current-updates",
            "binary_version": "304.131-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-experimental-304",
            "binary_version": "304.131-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-libopencl1-304-updates",
            "binary_version": "304.131-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-opencl-icd-304-updates",
            "binary_version": "304.131-0ubuntu0.14.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "nvidia-graphics-drivers-304-updates",
        "purl": "pkg:deb/ubuntu/nvidia-graphics-drivers-304-updates@304.131-0ubuntu0.14.04.1?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "304.131-0ubuntu0.14.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "304.108-0ubuntu1",
        "304.108-0ubuntu2",
        "304.108-0ubuntu3",
        "304.108-0ubuntu4",
        "304.116-0ubuntu1",
        "304.116-0ubuntu2",
        "304.117-0ubuntu1",
        "304.125-0ubuntu0.0.1",
        "304.125-0ubuntu0.0.2",
        "304.128-0ubuntu0.0.1"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2015-7869",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libcuda1-331",
            "binary_version": "340.96-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "libcuda1-340",
            "binary_version": "340.96-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-331",
            "binary_version": "340.96-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-331-uvm",
            "binary_version": "340.96-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-340",
            "binary_version": "340.96-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-340-uvm",
            "binary_version": "340.96-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-libopencl1-331",
            "binary_version": "340.96-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-libopencl1-340",
            "binary_version": "340.96-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-opencl-icd-331",
            "binary_version": "340.96-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-opencl-icd-340",
            "binary_version": "340.96-0ubuntu0.14.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "nvidia-graphics-drivers-340",
        "purl": "pkg:deb/ubuntu/nvidia-graphics-drivers-340@340.96-0ubuntu0.14.04.1?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "340.96-0ubuntu0.14.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "340.76-0ubuntu0.1",
        "340.93-0ubuntu0.0.1"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2015-7869",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libcuda1-331-updates",
            "binary_version": "340.96-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "libcuda1-340-updates",
            "binary_version": "340.96-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-331-updates",
            "binary_version": "340.96-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-331-updates-uvm",
            "binary_version": "340.96-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-340-updates",
            "binary_version": "340.96-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-340-updates-uvm",
            "binary_version": "340.96-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-libopencl1-331-updates",
            "binary_version": "340.96-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-libopencl1-340-updates",
            "binary_version": "340.96-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-opencl-icd-331-updates",
            "binary_version": "340.96-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-opencl-icd-340-updates",
            "binary_version": "340.96-0ubuntu0.14.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "nvidia-graphics-drivers-340-updates",
        "purl": "pkg:deb/ubuntu/nvidia-graphics-drivers-340-updates@340.96-0ubuntu0.14.04.1?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "340.96-0ubuntu0.14.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "340.76-0ubuntu0.1",
        "340.93-0ubuntu0.0.1"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2015-7869",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libcuda1-346",
            "binary_version": "352.63-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "libcuda1-352",
            "binary_version": "352.63-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-346",
            "binary_version": "352.63-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-352",
            "binary_version": "352.63-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-libopencl1-346",
            "binary_version": "352.63-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-libopencl1-352",
            "binary_version": "352.63-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-opencl-icd-346",
            "binary_version": "352.63-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-opencl-icd-352",
            "binary_version": "352.63-0ubuntu0.14.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "nvidia-graphics-drivers-352",
        "purl": "pkg:deb/ubuntu/nvidia-graphics-drivers-352@352.63-0ubuntu0.14.04.1?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "352.63-0ubuntu0.14.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": []
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2015-7869",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libcuda1-346-updates",
            "binary_version": "352.63-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "libcuda1-352-updates",
            "binary_version": "352.63-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-346-updates",
            "binary_version": "352.63-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-352-updates",
            "binary_version": "352.63-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-libopencl1-346-updates",
            "binary_version": "352.63-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-libopencl1-352-updates",
            "binary_version": "352.63-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-opencl-icd-346-updates",
            "binary_version": "352.63-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "nvidia-opencl-icd-352-updates",
            "binary_version": "352.63-0ubuntu0.14.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "nvidia-graphics-drivers-352-updates",
        "purl": "pkg:deb/ubuntu/nvidia-graphics-drivers-352-updates@352.63-0ubuntu0.14.04.1?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "352.63-0ubuntu0.14.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": []
    }
  ],
  "aliases": [],
  "details": "It was discovered that the NVIDIA graphics drivers incorrectly sanitized\nuser mode inputs. A local attacker could use this issue to possibly gain\nroot privileges.\n",
  "id": "USN-2814-1",
  "modified": "2026-04-22T07:36:32Z",
  "published": "2015-11-18T17:53:09Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-2814-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-7869"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "nvidia-graphics-drivers-304, nvidia-graphics-drivers-304-updates, nvidia-graphics-drivers-340, nvidia-graphics-drivers-340-updates, nvidia-graphics-drivers-352, nvidia-graphics-drivers-352-updates vulnerability",
  "upstream": [
    "UBUNTU-CVE-2015-7869"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

BDU:2015-12114 (CVE-2015-7869)

CVE-2015-7869 (GCVE-0-2015-7869)

USN-2814-1 (UBUNTU-CVE-2015-7869)

Tags

Sightings

Nomenclature

Related by attack behaviour