UBUNTU-CVE-2015-7869

    Dashboard / Vulnerabilities / UBUNTU-CVE-2015-7869

    UBUNTU-CVE-2015-7869

    Published: 18 Nov 2015Last Modified: 22 Apr 2026
    Upstream:
    CVE-2015-7869
    Aliases:
    USN-2814-1

    Summary:

    Details: Multiple integer overflows in the kernel mode driver for the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows and R304 before 304.131, R340 before 340.96, R352 before 352.63, and R358 before 358.16 on Linux allow local users to obtain sensitive information, cause a denial of service (crash), or possibly gain privileges via unknown vectors, which trigger uninitialized or out of bounds memory access. NOTE: this identifier has been SPLIT per ADT2 and ADT3 due to different vulnerability type and affected versions. See CVE-2015-8328 for the vulnerability in the NVAPI support layer in NVIDIA drivers for Windows.

    References: https://ubuntu.com/security/CVE-2015-7869, http://nvidia.custhelp.com/app/answers/detail/a_id/3808, https://ubuntu.com/security/notices/USN-2814-1, https://www.cve.org/CVERecord?id=CVE-2015-7869

    Affected packages

    Package

    Name: nvidia-graphics-drivers-304

    Purl: pkg:deb/ubuntu/[email protected]?arch=source&distro=trusty

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -304.131-0ubuntu0.14.04.1

    Affected versions

    304.88-0ubuntu8

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    UBUNTU-CVE-2015-7869 | CVE-DB