PublicDateAtUSN: 2013-04-03
Candidate: CVE-2013-0131
PublicDate: 2013-04-08 16:55:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0131
 http://nvidia.custhelp.com/app/answers/detail/a_id/3290
 https://ubuntu.com/security/notices/USN-1799-1
Description:
 Buffer overflow in the NVIDIA GPU driver before 304.88, 310.x before
 310.44, and 313.x before 313.30 for the X Window System on UNIX, when
 NoScanout mode is enabled, allows remote authenticated users to execute
 arbitrary code via a large ARGB cursor.
Ubuntu-Description:
Notes:
 mdeslaur> upstream advisory says vulnerability is present since 195.22
 mdeslaur> fixed in 304.88, 310.44, 313.30
 mdeslaur> We aren't going to fix the experimental drivers. Users of the
 mdeslaur> experimental drivers for who this issue is important are
 mdeslaur> recommended to switch to production drivers.
 mdeslaur> Doesn't actually affected nvidia-settings and
 mdeslaur> nvidia-settings-updates. Updates are simply required for
 mdeslaur> compatibility reasons.
 jdstrand> no updates from NVIDIA for 195.36 (Ubuntu 10.04 LTS), 280.13 and
  295.20 (Ubuntu 11.10) as of 2013-04-19
Bugs:
 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=704547
Priority: medium
Discovered-by:
Assigned-to:
CVSS: 

Patches_nvidia-graphics-drivers:
upstream_nvidia-graphics-drivers: released (304.88-1)
hardy_nvidia-graphics-drivers: DNE
lucid_nvidia-graphics-drivers: ignored (reached end-of-life)
oneiric_nvidia-graphics-drivers: ignored (reached end-of-life)
precise_nvidia-graphics-drivers: released (304.88-0ubuntu0.0.2)
quantal_nvidia-graphics-drivers: released (304.88-0ubuntu0.1)
raring_nvidia-graphics-drivers: DNE
devel_nvidia-graphics-drivers: DNE

Patches_nvidia-graphics-drivers-304:
upstream_nvidia-graphics-drivers-304: released (304.88)
hardy_nvidia-graphics-drivers-304: DNE
lucid_nvidia-graphics-drivers-304: DNE
oneiric_nvidia-graphics-drivers-304: DNE
precise_nvidia-graphics-drivers-304: not-affected (304.88-0ubuntu0.0.3)
quantal_nvidia-graphics-drivers-304: DNE
raring_nvidia-graphics-drivers-304: released (304.88-0ubuntu1)
devel_nvidia-graphics-drivers-304: released (304.88-0ubuntu1)

Patches_nvidia-graphics-drivers-304-updates:
upstream_nvidia-graphics-drivers-304-updates: released (304.88)
hardy_nvidia-graphics-drivers-304-updates: DNE
lucid_nvidia-graphics-drivers-304-updates: DNE
oneiric_nvidia-graphics-drivers-304-updates: DNE
precise_nvidia-graphics-drivers-304-updates: not-affected (304.88-0ubuntu0.0.3)
quantal_nvidia-graphics-drivers-304-updates: DNE
raring_nvidia-graphics-drivers-304-updates: released (304.88-0ubuntu1)
devel_nvidia-graphics-drivers-304-updates: released (304.88-0ubuntu1)

Patches_nvidia-graphics-drivers-310:
upstream_nvidia-graphics-drivers-310: released (310.44)
hardy_nvidia-graphics-drivers-310: DNE
lucid_nvidia-graphics-drivers-310: DNE
oneiric_nvidia-graphics-drivers-310: DNE
precise_nvidia-graphics-drivers-310: DNE
quantal_nvidia-graphics-drivers-310: DNE
raring_nvidia-graphics-drivers-310: released (310.44-0ubuntu1)
devel_nvidia-graphics-drivers-310: released (310.44-0ubuntu1)

Patches_nvidia-graphics-drivers-310-updates:
upstream_nvidia-graphics-drivers-310-updates: released (310.44)
hardy_nvidia-graphics-drivers-310-updates: DNE
lucid_nvidia-graphics-drivers-310-updates: DNE
oneiric_nvidia-graphics-drivers-310-updates: DNE
precise_nvidia-graphics-drivers-310-updates: DNE
quantal_nvidia-graphics-drivers-310-updates: DNE
raring_nvidia-graphics-drivers-310-updates: released (310.44-0ubuntu1)
devel_nvidia-graphics-drivers-310-updates: released (310.44-0ubuntu1)

Patches_nvidia-graphics-drivers-313-updates:
upstream_nvidia-graphics-drivers-313-updates: released (313.30)
hardy_nvidia-graphics-drivers-313-updates: DNE
lucid_nvidia-graphics-drivers-313-updates: DNE
oneiric_nvidia-graphics-drivers-313-updates: DNE
precise_nvidia-graphics-drivers-313-updates: DNE
quantal_nvidia-graphics-drivers-313-updates: DNE
raring_nvidia-graphics-drivers-313-updates: released (313.30-0ubuntu1)
devel_nvidia-graphics-drivers-313-updates: released (313.30-0ubuntu1)

Patches_nvidia-graphics-drivers-experimental-304:
upstream_nvidia-graphics-drivers-experimental-304: released (304.88)
hardy_nvidia-graphics-drivers-experimental-304: DNE
lucid_nvidia-graphics-drivers-experimental-304: DNE
oneiric_nvidia-graphics-drivers-experimental-304: DNE
precise_nvidia-graphics-drivers-experimental-304: ignored
quantal_nvidia-graphics-drivers-experimental-304: ignored
raring_nvidia-graphics-drivers-experimental-304: DNE
devel_nvidia-graphics-drivers-experimental-304: DNE

Patches_nvidia-graphics-drivers-experimental-310:
upstream_nvidia-graphics-drivers-experimental-310: released (310.44)
hardy_nvidia-graphics-drivers-experimental-310: DNE
lucid_nvidia-graphics-drivers-experimental-310: DNE
oneiric_nvidia-graphics-drivers-experimental-310: DNE
precise_nvidia-graphics-drivers-experimental-310: ignored
quantal_nvidia-graphics-drivers-experimental-310: ignored
raring_nvidia-graphics-drivers-experimental-310: DNE
devel_nvidia-graphics-drivers-experimental-310: DNE

Patches_nvidia-graphics-drivers-updates:
upstream_nvidia-graphics-drivers-updates: released (304.88)
hardy_nvidia-graphics-drivers-updates: DNE
lucid_nvidia-graphics-drivers-updates: DNE
oneiric_nvidia-graphics-drivers-updates: ignored (reached end-of-life)
precise_nvidia-graphics-drivers-updates: released (304.88-0ubuntu0.0.1)
quantal_nvidia-graphics-drivers-updates: released (304.88-0ubuntu0.1)
raring_nvidia-graphics-drivers-updates: DNE
devel_nvidia-graphics-drivers-updates: DNE

Patches_nvidia-settings:
upstream_nvidia-settings: not-affected
hardy_nvidia-settings: not-affected
lucid_nvidia-settings: not-affected
oneiric_nvidia-settings: not-affected
precise_nvidia-settings: not-affected
quantal_nvidia-settings: not-affected
raring_nvidia-settings: not-affected
devel_nvidia-settings: not-affected

Patches_nvidia-settings-updates:
upstream_nvidia-settings-updates: not-affected
hardy_nvidia-settings-updates: DNE
lucid_nvidia-settings-updates: DNE
oneiric_nvidia-settings-updates: not-affected
precise_nvidia-settings-updates: not-affected
quantal_nvidia-settings-updates: not-affected
raring_nvidia-settings-updates: not-affected
devel_nvidia-settings-updates: not-affected