UBUNTU-CVE-2015-5950

    Dashboard / Vulnerabilities / UBUNTU-CVE-2015-5950

    UBUNTU-CVE-2015-5950

    Published: 25 Sept 2015Last Modified: 22 Apr 2026
    Upstream:
    CVE-2015-5950
    Aliases:
    USN-2747-1

    Summary:

    Details: The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304.128, R340 before 340.93, and R352 before 352.41 on Linux; and R352 before 352.46 on GRID vGPU and vSGA allows local users to write to an arbitrary kernel memory location and consequently gain privileges via a crafted ioctl call.

    References: https://ubuntu.com/security/CVE-2015-5950, http://nvidia.custhelp.com/app/answers/detail/a_id/3763/~/cve-2015-5950-memory-corruption-due-to-an-unsanitized-pointer-in-the-nvidia, https://ubuntu.com/security/notices/USN-2747-1, https://www.cve.org/CVERecord?id=CVE-2015-5950

    Affected packages

    Package

    Name: nvidia-graphics-drivers-304

    Purl: pkg:deb/ubuntu/[email protected]?arch=source&distro=trusty

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -304.128-0ubuntu0.0.1

    Affected versions

    304.88-0ubuntu8

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    UBUNTU-CVE-2015-5950 | CVE-DB