WID-SEC-W-2024-1309

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Nvidia Treiber: Mehrere Schwachstellen

view advisory published 2024-06-06

Ein lokaler Angreifer kann mehrere Schwachstellen in Nvidia Grafiktreibern ausnutzen, um seine Privilegien zu erweitern, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, einen Denial-of-Service-Zustand zu verursachen oder beliebigen Code auszuführen.

01

describes (10)

Related CVEs.

IDseverity exploitable
CVE-2024-0099US——
NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where the guest OS could cause buffer overrun in the host. A successful exploit of this vulnerab…
CVE-2024-0094US——
NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where an untrusted guest VM can cause improper control of the interaction frequency in the host.…
CVE-2024-0093USmedium5.5—
NVIDIA GPU software for Linux contains a vulnerability where it can expose sensitive information to an actor that is not explicitly authorized to have access to that information. A…
CVE-2024-0092USmedium5.5—
NVIDIA GPU Driver for Windows and Linux contains a vulnerability where an improper check or improper handling of exception conditions might lead to denial of service.
CVE-2024-0091UShigh7.8—
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executing a driver API. A successful exploit of…
CVE-2024-0090UShigh7.8—
NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execut…
CVE-2024-0089UShigh7.8—
NVIDIA GPU Display Driver for Windows contains a vulnerability where the information from a previous client or another process could be disclosed. A successful exploit of this vuln…
CVE-2024-0086USmedium5.5—
NVIDIA vGPU software for Linux contains a vulnerability where the software can dereference a NULL pointer. A successful exploit of this vulnerability might lead to denial of servic…
CVE-2024-0085UShigh7.8—
NVIDIA vGPU software for Windows and Linux contains a vulnerability where unprivileged users could execute privileged operations on the host. A successful exploit of this vulnerabi…
CVE-2024-0084UShigh7.8—
NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where the guest OS could execute privileged operations. A successful exploit of this vulnerabili…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan