ByteOS Network

NVD Vulnerability Details :

CVE-2015-7869

Deferred

Source-cve@mitre.org

Published At-24 Nov, 2015 | 20:59

Updated At-12 Apr, 2025 | 10:46

Multiple integer overflows in the kernel mode driver for the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows and R304 before 304.131, R340 before 340.96, R352 before 352.63, and R358 before 358.16 on Linux allow local users to obtain sensitive information, cause a denial of service (crash), or possibly gain privileges via unknown vectors, which trigger uninitialized or out of bounds memory access. NOTE: this identifier has been SPLIT per ADT2 and ADT3 due to different vulnerability type and affected versions. See CVE-2015-8328 for the vulnerability in the NVAPI support layer in NVIDIA drivers for Windows.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	6.6	MEDIUM	AV:L/AC:M/Au:N/C:C/I:P/A:C

CPE Matches

Canonical Ltd.

>>ubuntu_linux>>12.04

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*

Canonical Ltd.

>>ubuntu_linux>>14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

Canonical Ltd.

>>ubuntu_linux>>15.04

cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>15.10

cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*

NVIDIA Corporation

>>gpu_driver>>Versions from 304(inclusive) to 304.131(exclusive)

cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*

NVIDIA Corporation

>>gpu_driver>>Versions from 340(inclusive) to 340.96(exclusive)

cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*

NVIDIA Corporation

>>gpu_driver>>Versions from 352(inclusive) to 352.63(exclusive)

cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*

NVIDIA Corporation

>>gpu_driver>>Versions from 358(inclusive) to 358.16(exclusive)

cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*

NVIDIA Corporation

>>gpu_driver>>346.22

cpe:2.3:a:nvidia:gpu_driver:346.22:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>*

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

NVIDIA Corporation

>>gpu_driver>>Versions from 340(inclusive) to 341.96(exclusive)

cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*

NVIDIA Corporation

>>gpu_driver>>Versions from 352(inclusive) to 354.35(exclusive)

cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*

NVIDIA Corporation

>>gpu_driver>>Versions from 358(inclusive) to 358.87(exclusive)

cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*

Microsoft Corporation

>>windows>>*

cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-189	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://nvidia.custhelp.com/app/answers/detail/a_id/3808/kw/security	cve@mitre.org	Vendor Advisory
http://securitytracker.com/id/1034176	cve@mitre.org	Third Party Advisory VDB Entry
http://ubuntu.com/usn/usn-2814-1	cve@mitre.org	Third Party Advisory
https://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04971867	cve@mitre.org	Third Party Advisory Vendor Advisory
http://nvidia.custhelp.com/app/answers/detail/a_id/3808/kw/security	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://securitytracker.com/id/1034176	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://ubuntu.com/usn/usn-2814-1	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04971867	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History