Directory traversal vulnerability in dlopen in libvdpau before 1.1.1 allows local users to gain privileges via the VDPAU_DRIVER environment variable.

libvdpau-1.1.1-2.fc21 - Backport current patches - Switch to new upstream git repository on freedesktop.org ---- Update to 1.1.1 Security fix for CVE-2015-5198, CVE-2015-5199, CVE-2015-5200

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

libvdpau was updated to use secure_getenv() instead of getenv() for several variables so it can be more safely used in setuid applications.

  - CVE-2015-5198: libvdpau: incorrect check for security     transition (bnc#943967)

  - CVE-2015-5199: libvdpau: directory traversal in dlopen     (bnc#943968)

  - CVE-2015-5200: libvdpau: vulnerability in trace     functionality (bnc#943969)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 1.1.1 Security fix for CVE-2015-5198, CVE-2015-5199, CVE-2015-5200

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

libvdpau was updated to use secure_getenv() instead of getenv() for several variables so it can be more safely used in setuid applications.

  - CVE-2015-5198: libvdpau: incorrect check for security     transition (bnc#943967)

  - CVE-2015-5199: libvdpau: directory traversal in dlopen     (bnc#943968)

  - CVE-2015-5200: libvdpau: vulnerability in trace     functionality (bnc#943969)

Florian Weimer of Red Hat Product Security discovered that libvdpau, the VDPAU wrapper library, did not properly validate environment variables, allowing local attackers to gain additional privileges.

Florian Weimer of Red Hat Product Security discovered that libvdpau, the VDPAU wrapper library, did not properly validate environment variables, allowing local attackers to gain additional privileges.

For Debian 6 'Squeeze', these problems have been fixed in libvdpau version 0.4.1-2+deb6u1. See DSA 3355-1 for information on other Debian releases.

We recommend that you upgrade your libvdpau packages.

Learn more about the Debian Long Term Support (LTS) Project and how to apply these updates at: https://wiki.debian.org/LTS/

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2729-1 advisory.

    Florian Weimer discovered that libvdpau incorrectly handled certain environment variables. A local     attacker could possibly use this issue to gain privileges.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
89219	Fedora 21 : libvdpau-1.1.1-2.fc21 (2015-3ca3f2138b)	Nessus	Fedora Local Security Checks	high
86803	SUSE SLED11 Security Update : libvdpau (SUSE-SU-2015:1925-1)	Nessus	SuSE Local Security Checks	high
86752	SUSE SLED12 / SLES12 Security Update : libvdpau (SUSE-SU-2015:1892-1)	Nessus	SuSE Local Security Checks	high
86128	Fedora 22 : libvdpau-1.1.1-1.fc22 (2015-14851)	Nessus	Fedora Local Security Checks	high
85926	openSUSE Security Update : libvdpau (openSUSE-2015-576)	Nessus	SuSE Local Security Checks	high
85898	Debian DSA-3355-1 : libvdpau - security update	Nessus	Debian Local Security Checks	high
85897	Debian DLA-306-1 : libvdpau security update	Nessus	Debian Local Security Checks	high
85828	Fedora 23 : libvdpau-1.1.1-1.fc23 (2015-14850)	Nessus	Fedora Local Security Checks	high
85797	Ubuntu 14.04 LTS : libvdpau vulnerabilities (USN-2729-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2015-5199

high

Tenable Plugins

high

high

high

high

high

high

high

high

high