All errata/sisyphus/ALT-PU-2015-1741-1
ALT-PU-2015-1741-1

Package update libvdpau in branch sisyphus

Version1.1.1-alt1
Task#148762
Published2015-09-01
Max severityHIGH
Severity:

Closed issues (6)

BDU:2015-11337
MEDIUM6.3

Уязвимость библиотеки libvdpau, позволяющая нарушителю выполнять запись произвольных файлов

Published: 2015-09-23Modified: 2021-03-23
CVSS 2.0MEDIUM 6.3
CVSS:2.0/AV:L/AC:M/Au:N/C:N/I:C/A:C
References
BDU:2015-11338
HIGH7.2

Уязвимость библиотеки libvdpau, позволяющая нарушителю повысить свои привилегии

Published: 2015-09-23Modified: 2021-03-23
CVSS 2.0HIGH 7.2
CVSS:2.0/AV:L/AC:L/Au:N/C:C/I:C/A:C
References
BDU:2015-11339
HIGH7.2

Уязвимость библиотеки libvdpau, позволяющая нарушителю повысить свои привилегии

Published: 2015-09-23Modified: 2021-03-23
CVSS 2.0HIGH 7.2
CVSS:2.0/AV:L/AC:L/Au:N/C:C/I:C/A:C
References
CVE-2015-5198
HIGH7.2

libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to gain privileges via unspecified vectors, related to the VDPAU_DRIVER_PATH environment variable.

Published: 2015-09-08Modified: 2025-04-12
CVSS 2.0HIGH 7.2
CVSS:2.0/AV:L/AC:L/Au:N/C:C/I:C/A:C
References
CVE-2015-5199
HIGH7.2

Directory traversal vulnerability in dlopen in libvdpau before 1.1.1 allows local users to gain privileges via the VDPAU_DRIVER environment variable.

Published: 2015-09-08Modified: 2025-04-12
CVSS 2.0HIGH 7.2
CVSS:2.0/AV:L/AC:L/Au:N/C:C/I:C/A:C
References
CVE-2015-5200
MEDIUM6.3

The trace functionality in libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to write to arbitrary files via unspecified vectors.

Published: 2015-09-08Modified: 2025-04-12
CVSS 2.0MEDIUM 6.3
CVSS:2.0/AV:L/AC:M/Au:N/C:N/I:C/A:C
References