CVE-2015-5199

High

Published: 08/09/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

Directory traversal vulnerability in dlopen in libvdpau before version 1.1.1 allows local users to gain privileges via the VDPAU_DRIVER environment variable.

Risk Assessment

Organizations may be exposed to unauthorized access by local users, potentially leading to privilege escalation.

Recommendation

It is recommended to update libvdpau to version 1.1.1 or later to mitigate this vulnerability.

Other vulnerabilities in libvdpau

CVE-2015-5198High
libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to gain privileges via unspecified vectors, related to the VDPAU_DRIVER_PATH environment variable.

Original NVD description (English source)

Directory traversal vulnerability in dlopen in libvdpau before 1.1.1 allows local users to gain privileges via the VDPAU_DRIVER environment variable.