Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Ubuntu 12.04 LTS USN-1523-1 Moderate: NVIDIA Driver Access Risk

ubuntu
Calendar Grey August 6, 2012
Scroller Ubuntu
Adjust NVIDIA driver settings to thwart local threat actors from obtaining root privileges; enhancements for Ubuntu may alleviate vulnerabilities.
NVIDIA graphics drivers could be made to run programs as an administrator.

Summary

NVIDIA graphics drivers could be made to run programs as an administrator.

Software Description:

- nvidia-graphics-drivers: NVIDIA binary Xorg driver

- nvidia-graphics-drivers-173: NVIDIA binary Xorg driver

- nvidia-graphics-drivers-173-updates: NVIDIA binary Xorg driver

- nvidia-graphics-drivers-updates: NVIDIA binary Xorg driver

Details:

It was discovered that the NVIDIA graphics drivers could be reconfigured to

gain access to arbitrary system memory. A local attacker could use this

issue to gain root privileges.

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
  nvidia-173                      173.14.35-0ubuntu0.2
  nvidia-173-updates              173.14.35-0ubuntu0.2
  nvidia-current                  295.40-0ubuntu1.1
  nvidia-current-updates          295.49-0ubuntu0.2

Ubuntu 11.10:
  nvidia-173                      173.14.30-0ubuntu8.2
  nvidia-173-updates              173.14.30-0ubuntu5.2
  nvidia-current                  280.13-0ubuntu6.2
  nvidia-current-updates          295.20-0ubuntu0.4

Ubuntu 11.04:
  nvidia-173                      173.14.30-0ubuntu1.2
  nvidia-current                  270.41.06-0ubuntu1.2

Ubuntu 10.04 LTS:
  nvidia-173                      173.14.22-0ubuntu11.2
  nvidia-current                  195.36.24-0ubuntu1~10.04.3

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1523-1

https://bugs.launchpad.net/ubuntu/+source/nvidia-graphics-drivers/+bug/1033452

Severity
important
Lowest
Low
Medium
High
Critical

August 06, 2012

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.