FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The last vuln.xml file processed by FreshPorts is:

Revision:  321198
Date:      2013-06-18
Time:      15:50:05Z
Committer: delphij

List all Vulnerabilities, by package

List all Vulnerabilities, by date

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
b91234e7-9a8b-11e1-b666-001636d274f3	NVIDIA UNIX driver -- access to arbitrary system memory NVIDIA Unix security team reports: Security vulnerability CVE-2012-0946 in the NVIDIA UNIX driver was disclosed to NVIDIA on March 20th, 2012. The vulnerability makes it possible for an attacker who has read and write access to the GPU device nodes to reconfigure GPUs to gain access to arbitrary system memory. NVIDIA is not aware of any reports of this vulnerability, outside of the disclosure which was made privately to NVIDIA. NVIDIA has identified the root cause of the vulnerability and has released updated drivers which close it. [NVIDIA encourages] all users with Geforce 8 or newer, G80 Quadro or newer, and all Tesla GPUs to update their drivers to 295.40 or later. Later, it was additionally discovered that similar exploit could be achieved through remapping of VGA window: NVIDIA received notification of a security exploit that uses NVIDIA UNIX device files to map and program registers to redirect the VGA window. Through the VGA window, the exploit can access any region of physical system memory. This arbitrary memory access can be further exploited, for example, to escalate user privileges. Discovery 2012-03-20 Entry 2012-05-10 Modified 2012-09-12 nvidia-driver gt 173.14.35_1 lt 295.71 gt 96.43.20_2 lt 173.14.35 gt 71.86.15_2 lt 96.43.20_2 lt 71.86.15_2 CVE-2012-0946 CVE-2012-4225
b91234e7-9a8b-11e1-b666-001636d274f3	NVIDIA UNIX driver -- access to arbitrary system memory NVIDIA Unix security team reports: Security vulnerability CVE-2012-0946 in the NVIDIA UNIX driver was disclosed to NVIDIA on March 20th, 2012. The vulnerability makes it possible for an attacker who has read and write access to the GPU device nodes to reconfigure GPUs to gain access to arbitrary system memory. NVIDIA is not aware of any reports of this vulnerability, outside of the disclosure which was made privately to NVIDIA. NVIDIA has identified the root cause of the vulnerability and has released updated drivers which close it. [NVIDIA encourages] all users with Geforce 8 or newer, G80 Quadro or newer, and all Tesla GPUs to update their drivers to 295.40 or later. Later, it was additionally discovered that similar exploit could be achieved through remapping of VGA window: NVIDIA received notification of a security exploit that uses NVIDIA UNIX device files to map and program registers to redirect the VGA window. Through the VGA window, the exploit can access any region of physical system memory. This arbitrary memory access can be further exploited, for example, to escalate user privileges. Discovery 2012-03-20 Entry 2012-05-10 Modified 2012-09-12 nvidia-driver gt 173.14.35_1 lt 295.71 gt 96.43.20_2 lt 173.14.35 gt 71.86.15_2 lt 96.43.20_2 lt 71.86.15_2 CVE-2012-0946 CVE-2012-4225

VuXML ID

Description

b91234e7-9a8b-11e1-b666-001636d274f3

NVIDIA UNIX driver -- access to arbitrary system memory

NVIDIA Unix security team reports:

Security vulnerability CVE-2012-0946 in the NVIDIA UNIX driver was disclosed to NVIDIA on March 20th, 2012. The vulnerability makes it possible for an attacker who has read and write access to the GPU device nodes to reconfigure GPUs to gain access to arbitrary system memory. NVIDIA is not aware of any reports of this vulnerability, outside of the disclosure which was made privately to NVIDIA.

NVIDIA has identified the root cause of the vulnerability and has released updated drivers which close it. [NVIDIA encourages] all users with Geforce 8 or newer, G80 Quadro or newer, and all Tesla GPUs to update their drivers to 295.40 or later.

Later, it was additionally discovered that similar exploit could be achieved through remapping of VGA window:

NVIDIA received notification of a security exploit that uses NVIDIA UNIX device files to map and program registers to redirect the VGA window. Through the VGA window, the exploit can access any region of physical system memory. This arbitrary memory access can be further exploited, for example, to escalate user privileges.

Discovery 2012-03-20
Entry 2012-05-10
Modified 2012-09-12
nvidia-driver

gt 173.14.35_1 lt 295.71

gt 96.43.20_2 lt 173.14.35

gt 71.86.15_2 lt 96.43.20_2

lt 71.86.15_2

CVE-2012-0946
CVE-2012-4225