1. Computers
  2. Display Drivers
  3. Graphics Cards
  4. Memory
  5. Motherboards
  6. Processors
  7. Software
  8. Storage
  9. Operating Systems


Facebook RSS Twitter Twitter Google Plus


Phoronix Test Suite

OpenBenchmarking.org

NVIDIA Has New Driver Update To Fix Security Flaw

NVIDIA

Published on 03 April 2013 01:04 AM EDT
Written by Fatima Sheremetyeva in NVIDIA
1 Comment

NVIDIA released the 313.30 Linux graphics driver on Tuesday night to take care of a security vulnerability.

Similar to past special-case releases to address security vulnerabilities with NVIDIA's binary blob, the 313.30 driver release officially just contains one security-related fix:
Fixed CVE-2013-0131: NVIDIA UNIX GPU Driver ARGB Cursor Buffer Overflow in "NoScanout" Mode. This buffer overflow, which occurred when an X client installed a large ARGB cursor on an X server running in NoScanout mode, could cause a denial of service (e.g., an X server segmentation fault), or could be exploited to achieve arbitrary code execution.
Details on this important NVIDIA driver security bug, which also hit FreeBSD and Solaris OS users, can be found in their customer portal. The good news is that this only affects those using the NoScanOut mode.

This security vulnerability that could take advantage of the X.Org Server generally running as the root user has affected NVIDIA users for a long while -- since the 195.22 driver days, or more easily known as late 2009. This is the first high-profile NVIDIA security driver bug in a few months, but last year they had some issues covered by Michael's NVIDIA Fixes Linux GPU Driver Security Hole and NVIDIA 295.40 Closes High-Risk Security Flaw.

This latest NVIDIA Linux graphics driver can be fetched from NVIDIA.com and is classified as a "certified" Linux GPU driver release.

Latest Articles & Reviews
  1. Preliminary Tests Of Intel Sandy Bridge & Ivy Bridge vs. Broadwell
  2. AMD FX-8320E Performance On Linux
  3. Linux Compiler Benchmarks Of LLVM Clang 3.5 vs. LLVM Clang 3.6-rc1
  4. Intel Broadwell HD Graphics 5500: Windows 8.1 vs. Linux
  5. Linux Benchmarks Of NVIDIA's Early 2015 GeForce Line-Up
  6. NVIDIA GeForce GTX 960: A Great $200 GPU For Linux Gamers
Latest Linux News
  1. AppStream 0.8 Works On Improving Open-Source Software Metadata
  2. Linux "GHOST" Vulnerability Hits Glibc Systems
  3. Linux Game Publishing Remains Offline, Three Years After The CEO Shakeup
  4. PlayStation 4 System Compiler Support Landing In LLVM
  5. Now-Closed KDE Vulnerabilities Remind Us X11 Screen Locks / Screensavers Are Insecure
  6. Vivaldi: A New Chromium-Powered, Multi-Platform Browser
  7. KDE Plasma 5.2 Officially Released
  8. Intel Broadwell On Linux Has Working OpenCL 1.2, VP8 Video Acceleration
  9. GParted 0.21 Brings ReFS Detection, EXT4 For RHEL5, Reiser4 For Linux 3.x
  10. Wine Staging Update Has Better CUDA Support, Driver Testing Framework
Most Viewed News This Week
  1. Windows 10 To Be A Free Upgrade: What Linux Users Need To Know
  2. LibreOffice 4.4 Is Coming Soon With New Features
  3. Google Admin Encourages Trying Btrfs, Not ZFS On Linux
  4. TraceFS: The Newest Linux File-System
  5. My Initial Intel Broadwell Linux Experience With The ThinkPad X1 Carbon
  6. Interstellar Marines On Linux With Catalyst: Bull S*#@
  7. Keith Packard Leaves Intel's Linux Graphics Work
  8. Faster VP9 Decoding Is On The Horizon