Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-5987
HistoryJan 21, 2014 - 12:00 a.m.

CVE-2013-5987

2014-01-2100:00:00
ubuntu.com
ubuntu.com
9

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.1%

Unspecified vulnerability in NVIDIA graphics driver Release 331, 325, 319,
310, and 304 allows local users to bypass intended access restrictions for
the GPU and gain privileges via unknown vectors.

Notes

Author Note
mdeslaur nvidia is not releasing updates for anything other than 304, 319, and 331, so mark others as ignored as there is nothing we can do to fix them. Updating the binary drivers runs the risk of hardware regressions. Since the lts releases now have updated drivers available in the archive, downgrading priority to low
OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchnvidia-graphics-drivers-304< 304.116-0ubuntu0.0.1UNKNOWN
ubuntu12.04noarchnvidia-graphics-drivers-304-updates< 304.116-0ubuntu0.0.1UNKNOWN

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.1%