nvidia-graphics-drivers: CVE-2013-5987 - Unprivileged GPU access vulnerability

Debian Bug report logs - #735271
nvidia-graphics-drivers: CVE-2013-5987 - Unprivileged GPU access vulnerability

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Andreas Beckmann <anbe@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: nvidia-graphics-drivers: CVE-2013-5987 - Unprivileged GPU access vulnerability

Date: Tue, 14 Jan 2014 11:25:06 +0100

Source: nvidia-graphics-drivers
Severity: serious
Tags: security
Control: fixed -1 319.72-1,331.20-1

Quoting from

http://nvidia.custhelp.com/app/answers/detail/a_id/3377

Vulnerability Description:
An NVIDIA graphics driver bug allows unprivileged user-mode software to
access the GPU inappropriately. An attacker who successfully exploited
this vulnerability could take control of an affected system.

Exploit Scope and Risk:
To take advantage of this vulnerability, an attacker would need to run
specially crafted software locally on the target computer. Expert
knowledge of system and NVIDIA GPU programming would be required to
create such an exploit. NVIDIA is not aware of the existence of any
actual exploits that leverage this vulnerability.  

This issue could potentially affect all supported PC OS platforms and
form factors. NVIDIA Tegra GPUs are not vulnerable.

The following table shows the first NVIDIA UNIX GPU Drivers that contain
the security fix.

Driver Branch 	 Version
Release 331 	 331.20
Release 319 	 319.72
Release 304 	 304.116


nvidia-graphics-drivers-legacy-304xx is affected as well, but is already
at the fixed version.
It is unknown whether the older legacy branches are affected.


Andreas

Message #12 received at 735271-close@bugs.debian.org (full text, mbox, reply):

From: Andreas Beckmann <anbe@debian.org>

To: 735271-close@bugs.debian.org

Subject: Bug#735271: fixed in nvidia-graphics-drivers 304.117-1

Date: Sun, 16 Mar 2014 18:47:09 +0000

Source: nvidia-graphics-drivers
Source-Version: 304.117-1

We believe that the bug you reported is fixed in the latest version of
nvidia-graphics-drivers, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 735271@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andreas Beckmann <anbe@debian.org> (supplier of updated nvidia-graphics-drivers package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sat, 15 Feb 2014 16:11:02 +0100
Source: nvidia-graphics-drivers
Binary: nvidia-glx xserver-xorg-video-nvidia nvidia-glx-ia32 libgl1-nvidia-glx libxvmcnvidia1 libgl1-nvidia-glx-ia32 nvidia-alternative nvidia-kernel-dkms nvidia-kernel-source nvidia-vdpau-driver nvidia-vdpau-driver-ia32 nvidia-smi libcuda1 libcuda1-ia32 libnvidia-compiler libnvidia-compiler-ia32 libnvcuvid1 libnvidia-ml1 nvidia-opencl-common nvidia-opencl-icd nvidia-opencl-icd-ia32 nvidia-libopencl1 nvidia-libopencl1-ia32 libgl1-nvidia-alternatives libgl1-nvidia-alternatives-ia32 libglx-nvidia-alternatives nvidia-detect
Architecture: source amd64
Version: 304.117-1
Distribution: wheezy
Urgency: medium
Maintainer: Debian NVIDIA Maintainers <pkg-nvidia-devel@lists.alioth.debian.org>
Changed-By: Andreas Beckmann <anbe@debian.org>
Description: 
 libcuda1   - NVIDIA CUDA runtime library
 libcuda1-ia32 - please switch to multiarch libcuda1:i386
 libgl1-nvidia-alternatives - transition libGL.so* diversions to glx-alternative-nvidia
 libgl1-nvidia-alternatives-ia32 - simplifies replacing MESA libGL with GPU vendor libraries (32-bit
 libgl1-nvidia-glx - NVIDIA binary OpenGL libraries${nvidia:LegacyDesc}
 libgl1-nvidia-glx-ia32 - please switch to multiarch libgl1-nvidia${nvidia:Legacy}-glx:i386
 libglx-nvidia-alternatives - transition libgl.so diversions to glx-alternative-nvidia
 libnvcuvid1 - NVIDIA CUDA nvcuvid runtime library
 libnvidia-compiler - NVIDIA runtime compiler library
 libnvidia-compiler-ia32 - please switch to multiarch libnvidia-compiler:i386
 libnvidia-ml1 - NVIDIA management library (NVML) runtime library
 libxvmcnvidia1 - NVIDIA binary XvMC library${nvidia:LegacyDesc}
 nvidia-alternative - allows the selection of NVIDIA as GLX provider
 nvidia-detect - NVIDIA GPU detection utility
 nvidia-glx - NVIDIA metapackage${nvidia:LegacyDesc}
 nvidia-glx-ia32 - NVIDIA 32-bit libraries${nvidia:LegacyDesc} (transitional package
 nvidia-kernel-dkms - NVIDIA binary kernel module DKMS source${nvidia:LegacyDesc}
 nvidia-kernel-source - NVIDIA binary kernel module source${nvidia:LegacyDesc}
 nvidia-libopencl1 - NVIDIA OpenCL library
 nvidia-libopencl1-ia32 - please switch to multiarch nvidia-libopencl1:i386
 nvidia-opencl-common - NVIDIA OpenCL driver
 nvidia-opencl-icd - NVIDIA OpenCL ICD
 nvidia-opencl-icd-ia32 - please switch to multiarch nvidia-opencl-icd:i386
 nvidia-smi - NVIDIA System Management Interface
 nvidia-vdpau-driver - NVIDIA vdpau driver
 nvidia-vdpau-driver-ia32 - please switch to multiarch nvidia-vdpau-driver:i386
 xserver-xorg-video-nvidia - NVIDIA binary Xorg driver${nvidia:LegacyDesc}
Closes: 710891 722469 735271
Changes: 
 nvidia-graphics-drivers (304.117-1) wheezy; urgency=medium
 .
   * New upstream legacy 304xx branch release 304.117 (2013-12-11).
     - Added support for X.org xserver ABI 15 (xorg-server 1.15).
   * New upstream legacy 304xx branch release 304.116 (2013-11-06).
     - Fixed a security vulnerability in the microcode for microcontrollers
       that are part of NVIDIA GPUs.  This vulnerability could be exploited
       to take control of a system, and it is described in greater detail at:
       http://cve.mitre.org/cgi-bin/cvename.cgi?name=2013-5987
       (Closes: #735271)
     - Improved compatibility with recent Linux kernels.
     - Updated the NVIDIA OpenGL driver to write temporary files to $TMPDIR
       if it is set, instead of unconditionally writing to /tmp.
     - Updated a fallback of writing temporary files to $HOME/.nvidia to
       use $HOME/.nv instead, as the latter path is already used for other
       NVIDIA driver related files.
   * New upstream legacy 304xx branch release 304.108 (2013-08-08).
     * Add support for Linux 3.10.
   * Refresh patches.
   * conftest.h:
     - conftest.h: Add ARM support.
     - Implement check for drm/drmP.h (319.12).
     - Implement new conftest.sh functions drm_available (319.12),
       dom0_kernel_present (325.08),
       proc_create_data, pde_data, proc_remove (304.108, 325.15).
     - Implement conftest.sh sanity checks (only emit warning)
       nvidiafb_sanity_check (1.0-8174), xen_sanity_check (1.0-9746, 177.76),
       preempt_rt_sanity_check (325.08).
     - Implement new conftest.sh function get_num_physpages (173.14.38).
     - Implement checks for linux/printk.h, linux/ratelimit.h,
       linux/prio_tree.h (331.13).
     - Implement new conftest.sh functions vm_operations_struct (331.13),
       task_struct (331.17), address_space, address_space_init_once (331.20).
   * Add xorg-video-abi-15 as alternative dependency.
   * Merge some bugfixes from sid.
   * Use canonical Vcs-* URLs.
   * {libgl1-nvidia-glx,libcuda1}.postinst: Load debconf/confmodule, may be
     used by /usr/lib/nvidia/check* scripts.  (Closes: #722469)
   * debian/module/debian/prep-modules: Sanitize the kernel version. Replace
     underscores (may occur in custom kernels) with dashes to be eligible for
     package names and versions.  (Closes: #710891)
   * Update lintian overrides.
Checksums-Sha1: 
 5462311a00d5aedb6b2b5d456610f072d954f6de 3978 nvidia-graphics-drivers_304.117-1.dsc
 3d7564cb75e2fb94ff12940fcf61069f846d0580 105342161 nvidia-graphics-drivers_304.117.orig.tar.gz
 ceab091c16419d8f4c78a831472c8975696bfa96 113938 nvidia-graphics-drivers_304.117-1.debian.tar.gz
 df238d8fe26820f6d91e6bd51f73bca8c4c19946 353120 nvidia-glx_304.117-1_amd64.deb
 d5e6424ef117788ec1094a14057f7b5a35c51dab 2357994 xserver-xorg-video-nvidia_304.117-1_amd64.deb
 9c49920884bbbd67118e9f75f35b317fc3594e9a 94920 nvidia-glx-ia32_304.117-1_amd64.deb
 6724e79e74c0b24d61d6dc9c3dcb36508e73841a 6561860 libgl1-nvidia-glx_304.117-1_amd64.deb
 887e0d5938b40069872848337f5931b27784979a 282718 libxvmcnvidia1_304.117-1_amd64.deb
 e5c4223ef2720b0717ddeb7b37d698e42802c076 95170 libgl1-nvidia-glx-ia32_304.117-1_amd64.deb
 1a3531b33e27db7a85f5766ddaedfee20ff67c79 95718 nvidia-alternative_304.117-1_amd64.deb
 f59e592aa18fd0207f4396b56f52b8448345c54e 6912772 nvidia-kernel-dkms_304.117-1_amd64.deb
 332d95482e4a314a0585fe1c467120028ffc5f41 9083284 nvidia-kernel-source_304.117-1_amd64.deb
 d51a54ca0a4d15ac9903f6d4895ec67d5dd41b09 838008 nvidia-vdpau-driver_304.117-1_amd64.deb
 29e300c05ddcaf2bb2cc63dde4934c91db4ba4eb 94970 nvidia-vdpau-driver-ia32_304.117-1_amd64.deb
 e5b104d48cbb4dbee8b76d2984437bea0a0332a0 146176 nvidia-smi_304.117-1_amd64.deb
 b7711647990e2f10cb482f91b9c3ff1f06b1fe0a 3271574 libcuda1_304.117-1_amd64.deb
 13002f84bf202ae8f0e97419999092cb733056c9 94934 libcuda1-ia32_304.117-1_amd64.deb
 8e9770a538d603548818a1384ee84432822a7158 6971960 libnvidia-compiler_304.117-1_amd64.deb
 e35851b4d19b83b3ffda60f6919bf00be7ec9663 94502 libnvidia-compiler-ia32_304.117-1_amd64.deb
 d5e92e7564473293e7cf7a86a4df0dbcc54f56cc 624500 libnvcuvid1_304.117-1_amd64.deb
 c03dc9ae244e8ec28f339bc96c8c9d0ce747e2d5 216410 libnvidia-ml1_304.117-1_amd64.deb
 303b432a299cb20ceed7fefb148d0f4696bb1398 94678 nvidia-opencl-common_304.117-1_amd64.deb
 c6908a5d6f64310b785b307973a1877982275997 2974118 nvidia-opencl-icd_304.117-1_amd64.deb
 d9b30c0931aca288803fa4a23d0b312284c4ab32 94876 nvidia-opencl-icd-ia32_304.117-1_amd64.deb
 56c99cb4520eab7bd15f76465e2145ac947d0321 101338 nvidia-libopencl1_304.117-1_amd64.deb
 12df3b66e0d305631327d980aaf024b401ea0f98 94478 nvidia-libopencl1-ia32_304.117-1_amd64.deb
 417fdd1a83c77d479592ea4fefb1a55bb989b63f 94868 libgl1-nvidia-alternatives_304.117-1_amd64.deb
 d15ba28ab73f22d55b1769d72da612d223108ba0 96718 libgl1-nvidia-alternatives-ia32_304.117-1_amd64.deb
 79357231e64cac709c51627b6053617447f2ae71 94812 libglx-nvidia-alternatives_304.117-1_amd64.deb
 b04f93f2d228c389b41b82e33313c3a7c1b08a08 97146 nvidia-detect_304.117-1_amd64.deb
Checksums-Sha256: 
 bfa507dd81443c17c3a9919e78dc65e9b3cfb9d91dd91315e1515dda9eb9d2c8 3978 nvidia-graphics-drivers_304.117-1.dsc
 ea08437fed8f60e4180f3b6b99dd7fd99bcfd0fe824144fc295a33d5e738ab02 105342161 nvidia-graphics-drivers_304.117.orig.tar.gz
 0cc40ac8a7f00f5066cbd6fa92169616551ce3f07285c037300722a025b234b8 113938 nvidia-graphics-drivers_304.117-1.debian.tar.gz
 ea41577e3945daf22de5ae9391cf2d7d412dc26d1b338e4f289893c8012d431b 353120 nvidia-glx_304.117-1_amd64.deb
 2dca942fc1cf7b3869a73872a70eca0565bc3abca1c9b113643014cff7412ee5 2357994 xserver-xorg-video-nvidia_304.117-1_amd64.deb
 88b7c64b5e65478d3456bc784fb0b2485a81a1d9312b2a9580c54f9ded0b43fe 94920 nvidia-glx-ia32_304.117-1_amd64.deb
 ca2ad8fca051093d520032e0afadc79eb29ea951f4a6fc858c9266980e3ae7c8 6561860 libgl1-nvidia-glx_304.117-1_amd64.deb
 8b4f66372c4befb43dc7971e86ea4e0c8c220cfccb00dd5ce68ee19931599446 282718 libxvmcnvidia1_304.117-1_amd64.deb
 ed979a5ba7e1436d1027202aa47e350bf9368cdae544df609e84d8489bb783b3 95170 libgl1-nvidia-glx-ia32_304.117-1_amd64.deb
 58188ade158bbaf4141dfac21deea42bf38ae2495bc679f738e3d2d122084b02 95718 nvidia-alternative_304.117-1_amd64.deb
 3c2942c1c4ca641fd36ae3bb8c1a9feeb498b1ce847ba51cd9b71016eeffa68f 6912772 nvidia-kernel-dkms_304.117-1_amd64.deb
 3c46562228a4f12011f493135d15b17ba3ce60b4b68427f8c31f8aeeef5548bd 9083284 nvidia-kernel-source_304.117-1_amd64.deb
 5af4b336ea1734ffd583b2ed4f79d69e56a09ea9cf56e9a87e9406427db47951 838008 nvidia-vdpau-driver_304.117-1_amd64.deb
 89079a3770c6f69c1249246357849d3c32f2d1267d7e72806497bf3b77c20ddf 94970 nvidia-vdpau-driver-ia32_304.117-1_amd64.deb
 5b0761cca06b8398e0b7ba116b8238036e0c3d825d85194bd9ce6f5898e62d0d 146176 nvidia-smi_304.117-1_amd64.deb
 675e62363c3e2b40159959591aab8a5f220fca05ccd655904a6e053808f67956 3271574 libcuda1_304.117-1_amd64.deb
 b2c4c7e8ca6f755315ba84d6955fc3414fdad9e716e9a27060f15f43c18be18c 94934 libcuda1-ia32_304.117-1_amd64.deb
 2ec5bbb868e5f37b3dbf9dc22d9e24e36158d5bc55ada6ed4b71dedac2c42757 6971960 libnvidia-compiler_304.117-1_amd64.deb
 4e33b2d3bba74e2e538c9e78711c5eef67ef14d0aa7b6a775ecf9aeb04a9bdee 94502 libnvidia-compiler-ia32_304.117-1_amd64.deb
 d1e27a89f29b6658cdfc7bdb79f78ccbd69221b469662471f32ab577ef4eb583 624500 libnvcuvid1_304.117-1_amd64.deb
 53244669fefd50e5df71f595a49f46dde9c2f6daad1d3ab5021254cf1a3fa52c 216410 libnvidia-ml1_304.117-1_amd64.deb
 d52a53e834e2929e0b15bff02696443f564c97cb299f1ba8f91b0e439e88ca31 94678 nvidia-opencl-common_304.117-1_amd64.deb
 ee238534b84b001b9856136ee07afb5b07dde1cc8d25c567ff5d523af0fc6c03 2974118 nvidia-opencl-icd_304.117-1_amd64.deb
 c31f300df9c974c964d8fc5731f010f4e60ae0399191613f91ca0de706ef77c6 94876 nvidia-opencl-icd-ia32_304.117-1_amd64.deb
 8bf92461365d2170bc8c30c2f52eb464c8c7b80dcb07566796e5705288134dfe 101338 nvidia-libopencl1_304.117-1_amd64.deb
 8aabad4838a3389cb36057021405301b883ba32a3091f6b468a589fa4e9cbc21 94478 nvidia-libopencl1-ia32_304.117-1_amd64.deb
 a908677156c859e344a26ed21460b64fe9ce83185e8f435a2c1e20d72ec66529 94868 libgl1-nvidia-alternatives_304.117-1_amd64.deb
 dbab06e02988ac8d294a594243d8a373eba3d10a847e3053cdd41a7058692792 96718 libgl1-nvidia-alternatives-ia32_304.117-1_amd64.deb
 b388cb6573caebb00a94759a9d312900f0b98036f279faaabb0bd858b433cd2c 94812 libglx-nvidia-alternatives_304.117-1_amd64.deb
 8b185887e6cdac7fff976b808fd6717725e872a8b9e963936c6ee0ac7f9df06c 97146 nvidia-detect_304.117-1_amd64.deb
Files: 
 e6589d64b52307978bb7b6aced4eb39c 3978 non-free/libs optional nvidia-graphics-drivers_304.117-1.dsc
 5cd7547d4fc9bd6372f7fd480922b222 105342161 non-free/libs optional nvidia-graphics-drivers_304.117.orig.tar.gz
 16370680390076e1a01691230a59731f 113938 non-free/libs optional nvidia-graphics-drivers_304.117-1.debian.tar.gz
 34dddc63f4155733c4c8fcd06e29e348 353120 non-free/x11 optional nvidia-glx_304.117-1_amd64.deb
 9a7c09fb924997522a3f4d1a5628bf1c 2357994 non-free/x11 optional xserver-xorg-video-nvidia_304.117-1_amd64.deb
 5743b8ebe5d2ef7ea3c34c7b058f27a8 94920 non-free/oldlibs extra nvidia-glx-ia32_304.117-1_amd64.deb
 4c3ae46f317d8e244fdeda99fc931f16 6561860 non-free/libs optional libgl1-nvidia-glx_304.117-1_amd64.deb
 27da48de581fd4fa60a93291a8209597 282718 non-free/libs optional libxvmcnvidia1_304.117-1_amd64.deb
 219e4903f196281444c38a4e37509cb4 95170 non-free/oldlibs extra libgl1-nvidia-glx-ia32_304.117-1_amd64.deb
 1817dc0e86f093b5ec96df7a7914ac8e 95718 non-free/libs optional nvidia-alternative_304.117-1_amd64.deb
 f7f5a6a242f94b2085f37a9875867019 6912772 non-free/kernel optional nvidia-kernel-dkms_304.117-1_amd64.deb
 cb7a4c40a550fd00499db9d7e8fd3a70 9083284 non-free/kernel optional nvidia-kernel-source_304.117-1_amd64.deb
 5d33976d39ca0b995cefa3c59ca33e2a 838008 non-free/video optional nvidia-vdpau-driver_304.117-1_amd64.deb
 80e73e889dcdde0a45d0745e0150fb1a 94970 non-free/oldlibs extra nvidia-vdpau-driver-ia32_304.117-1_amd64.deb
 d3c735d0418ee20a85a7d890c9f06d6a 146176 non-free/utils optional nvidia-smi_304.117-1_amd64.deb
 4aa0baec75ff8d22ee58dc798dd4c788 3271574 non-free/libs optional libcuda1_304.117-1_amd64.deb
 58df99cffc37587ae2f0de934d889636 94934 non-free/oldlibs extra libcuda1-ia32_304.117-1_amd64.deb
 e8e06fb0845eb2d4a653ff862b169852 6971960 non-free/libs optional libnvidia-compiler_304.117-1_amd64.deb
 28b11d7a5ba2abd512ecc3b0bef10133 94502 non-free/oldlibs extra libnvidia-compiler-ia32_304.117-1_amd64.deb
 8d1f65d49b02fc4f0fc9afae5d736433 624500 non-free/libs optional libnvcuvid1_304.117-1_amd64.deb
 56c7c622ad838bf7bbd92b0b08212a2e 216410 non-free/libs optional libnvidia-ml1_304.117-1_amd64.deb
 80e3794700ba7570f92acbf444e2c372 94678 non-free/libs optional nvidia-opencl-common_304.117-1_amd64.deb
 c09c26021e76b5bf37a989bb5f52729b 2974118 non-free/libs optional nvidia-opencl-icd_304.117-1_amd64.deb
 6a6a4c6f1591dd5113b22b21fe690d89 94876 non-free/oldlibs extra nvidia-opencl-icd-ia32_304.117-1_amd64.deb
 a204e3100520633b19f8b0bab7f73bd2 101338 non-free/libs optional nvidia-libopencl1_304.117-1_amd64.deb
 277af7235586f49624955ebffd61fe7b 94478 non-free/oldlibs extra nvidia-libopencl1-ia32_304.117-1_amd64.deb
 fc7e46d320ca474b871f85844f4d587f 94868 non-free/oldlibs optional libgl1-nvidia-alternatives_304.117-1_amd64.deb
 520e20e882d259161272d29ace013273 96718 non-free/libs extra libgl1-nvidia-alternatives-ia32_304.117-1_amd64.deb
 7aab7c2547e277f2b33a032419f0cff3 94812 non-free/oldlibs optional libglx-nvidia-alternatives_304.117-1_amd64.deb
 3656d5b47cb31fb54590e75dc4903e44 97146 non-free/x11 optional nvidia-detect_304.117-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
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=fudC
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.