nvidia-graphics-drivers-304, nvidia-graphics-drivers-304-updates, nvidia-graphics-drivers-331, nvidia-graphics-drivers-331-updates vulnerabilities

Related Vulnerabilities: CVE-2014-8091   CVE-2014-8098   CVE-2014-8298  

Several security issues were fixed in the NVIDIA graphics drivers.

It was discovered that the NVIDIA graphics drivers incorrectly handled GLX indirect rendering support. An attacker able to connect to an X server, either locally or remotely, could use these issues to cause the X server to crash or execute arbitrary code resulting in possible privilege escalation.

10 December 2014

nvidia-graphics-drivers-304, nvidia-graphics-drivers-304-updates, nvidia-graphics-drivers-331, nvidia-graphics-drivers-331-updates vulnerabilities

A security issue affects these releases of Ubuntu and its derivatives:

  • Ubuntu 14.10
  • Ubuntu 14.04 LTS
  • Ubuntu 12.04 LTS

Summary

Several security issues were fixed in the NVIDIA graphics drivers.

Software Description

  • nvidia-graphics-drivers-304 - NVIDIA binary Xorg driver
  • nvidia-graphics-drivers-304-updates - NVIDIA binary Xorg driver
  • nvidia-graphics-drivers-331 - NVIDIA binary Xorg driver
  • nvidia-graphics-drivers-331-updates - NVIDIA binary Xorg driver

Details

It was discovered that the NVIDIA graphics drivers incorrectly handled GLX indirect rendering support. An attacker able to connect to an X server, either locally or remotely, could use these issues to cause the X server to crash or execute arbitrary code resulting in possible privilege escalation.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 14.10
nvidia-304 - 304.125-0ubuntu0.1
nvidia-304-updates - 304.125-0ubuntu0.1
nvidia-331 - 331.113-0ubuntu0.1
nvidia-331-updates - 331.113-0ubuntu0.1
Ubuntu 14.04 LTS
nvidia-304 - 304.125-0ubuntu0.0.1
nvidia-304-updates - 304.125-0ubuntu0.0.1
nvidia-331 - 331.113-0ubuntu0.0.4
nvidia-331-updates - 331.113-0ubuntu0.0.4
Ubuntu 12.04 LTS
nvidia-304 - 304.125-0ubuntu0.0.0.1
nvidia-304-updates - 304.125-0ubuntu0.0.0.1
nvidia-331 - 331.113-0ubuntu0.0.0.3
nvidia-331-updates - 331.113-0ubuntu0.0.0.3

To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.

After a standard system update you need to reboot your computer to make all the necessary changes.

References