DeutschShown in its original language — a full translation is planned for a future version.
Nvidia GPU Display Treiber: Mehrere Schwachstellen
view advisory published 2021-07-20
Ein lokaler Angreifer kann mehrere Schwachstellen in Nvidia GPU Display Treibern ausnutzen, um einen Denial of Service zu verursachen, Code zur Ausführung zu bringen, seine Rechte zu erweitern und Informationen offenzulegen.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-1096US | medium5.5 | — | ||
NVIDIA Windows GPU Display Driver for Windows contains a vulnerability in the NVIDIA kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where dereferencing a NULL pointer m… | ||||
| CVE-2021-1095US | medium5.5 | — | ||
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handlers for all control calls with embedded parameters where deref… | ||||
| CVE-2021-1094US | medium6.1 | — | ||
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where an out of bounds array access may l… | ||||
| CVE-2021-1093US | medium5.5 | — | ||
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in firmware where the driver contains an assert() or similar statement that can be triggered by an attacker… | ||||
| CVE-2021-1092US | high7.1 | — | ||
NVIDIA GPU Display Driver for Windows contains a vulnerability in the NVIDIA Control Panel application where it is susceptible to a Windows file system symbolic link attack where a… | ||||
| CVE-2021-1091US | high7.1 | — | ||
NVIDIA GPU Display driver for Windows contains a vulnerability where an unprivileged user can create a file hard link that causes the driver to overwrite a file that requires eleva… | ||||
| CVE-2021-1090US | high7.1 | — | ||
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for control calls where the software reads or writes to a b… | ||||
| CVE-2021-1089US | high7.8 | — | ||
NVIDIA GPU Display Driver for Windows contains a vulnerability in nvidia-smi where an uncontrolled DLL loading path may lead to arbitrary code execution, denial of service, informa… | ||||
02
references
External citations — patches, advisories, analysis.
- Debian Security Advisory DLA-2888 vom 2022-01-18external
- NVIDIA GPU Display Driver Security Bulletin vom 2021-07-20external
- Arch Linux Security Advisory ASA-202107-58 vom 2021-07-22external
- Gentoo Linux Security Advisory GLSA-202310-02 vom 2023-10-03external
- Lenovo Security Advisory LEN-65136 vom 2021-08-10external
- WID-SEC-W-2023-2533 - CSAF Versionself
- WID-SEC-2023-2533 - Portal Versionself
- EMC Security Advisory DSA-2021-183 vom 2022-01-28external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan