CVE-2012-0946
Published: 11 April 2012
The NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memory locations by leveraging GPU device-node read/write privileges.
Notes
| Author | Note |
|---|---|
| mdeslaur |
driver 96 is for older cards which aren't vulnerable to the issue |
| jdstrand |
-173 is currently not installable or usable on 12.04 LTS. Nvidia is planning a driver update for this series, which will include the fix for this issue tseliot is working on the updates for 12.04 LTS |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
nvidia-graphics-drivers
Launchpad, Ubuntu, Debian |
hardy |
Does not exist
|
| lucid |
Released
(195.36.24-0ubuntu1~10.04.2)
|
|
| maverick |
Ignored
(end of life)
|
|
| natty |
Released
(270.41.06-0ubuntu1.1)
|
|
| oneiric |
Released
(280.13-0ubuntu6.1)
|
|
| upstream |
Needs triage
|
|
|
Patches:
upstream: ftp://download.nvidia.com/XFree86/patches/security/CVE-2012-0946/ |
||
|
nvidia-graphics-drivers-173
Launchpad, Ubuntu, Debian |
hardy |
Does not exist
|
| lucid |
Released
(173.14.22-0ubuntu11.1)
|
|
| maverick |
Ignored
(end of life)
|
|
| natty |
Released
(173.14.30-0ubuntu1.1)
|
|
| oneiric |
Released
(173.14.30-0ubuntu8.1)
|
|
| upstream |
Needs triage
|
|
|
Patches:
upstream: ftp://download.nvidia.com/XFree86/patches/security/CVE-2012-0946/ |
||
|
nvidia-graphics-drivers-173-updates
Launchpad, Ubuntu, Debian |
hardy |
Does not exist
|
| lucid |
Does not exist
|
|
| maverick |
Does not exist
|
|
| natty |
Does not exist
|
|
| oneiric |
Released
(173.14.30-0ubuntu5.1)
|
|
| upstream |
Needs triage
|
|
|
Patches:
upstream: ftp://download.nvidia.com/XFree86/patches/security/CVE-2012-0946/ |
||
|
nvidia-graphics-drivers-updates
Launchpad, Ubuntu, Debian |
hardy |
Does not exist
|
| lucid |
Does not exist
|
|
| maverick |
Does not exist
|
|
| natty |
Does not exist
|
|
| oneiric |
Released
(280.13-0ubuntu5.1)
|
|
| upstream |
Needs triage
|
|
|
Patches:
upstream: ftp://download.nvidia.com/XFree86/patches/security/CVE-2012-0946/ |
||