{ "schema_version": "1.4.0", "id": "GHSA-gfjj-596m-mjf9", "modified": "2022-05-17T03:19:56Z", "published": "2022-05-17T03:19:56Z", "aliases": [ "CVE-2015-5199" ], "details": "Directory traversal vulnerability in dlopen in libvdpau before 1.1.1 allows local users to gain privileges via the VDPAU_DRIVER environment variable.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-5199" }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1253826" }, { "type": "WEB", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170637.html" }, { "type": "WEB", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165546.html" }, { "type": "WEB", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167469.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-updates/2015-09/msg00012.html" }, { "type": "WEB", "url": "http://lists.x.org/archives/xorg-announce/2015-August/002630.html" }, { "type": "WEB", "url": "http://www.debian.org/security/2015/dsa-3355" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/76636" }, { "type": "WEB", "url": "http://www.ubuntu.com/usn/USN-2729-1" } ], "database_specific": { "cwe_ids": [ "CWE-22" ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2015-09-08T15:59:00Z" } }