DeutschShown in its original language — a full translation is planned for a future version.
Nvidia Treiber: Mehrere Schwachstellen
view advisory published 2020-06-24
Ein lokaler Angreifer kann mehrere Schwachstellen in Nvidia Treiber ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode auszuführen, einen Denial of Service Zustand herbeizuführen oder Informationen offenzulegen.
01
describes (12)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-5973US | medium4.4 | — | ||
NVIDIA Virtual GPU Manager and the guest drivers contain a vulnerability in vGPU plugin, in which there is the potential to execute privileged operations, which may lead to denial… | ||||
| CVE-2020-5972US | high7.1 | — | ||
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which local pointer variables are not initialized and may be freed later, which may lead to tampering or… | ||||
| CVE-2020-5971US | high7.8 | — | ||
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which the software reads from a buffer by using buffer access mechanisms such as indexes or pointers that… | ||||
| CVE-2020-5970US | high7.1 | — | ||
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data size is not validated, which may lead to tampering or denial of service. This affects… | ||||
| CVE-2020-5969US | medium6.3 | — | ||
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which it validates a shared resource before using it, creating a race condition which may lead to denial… | ||||
| CVE-2020-5968US | high7.8 | — | ||
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which the software does not restrict or incorrectly restricts operations within the boundaries of a resou… | ||||
| CVE-2020-5967US | medium4.7 | — | ||
NVIDIA Linux GPU Display Driver, all versions, contains a vulnerability in the UVM driver, in which a race condition may lead to a denial of service. | ||||
| CVE-2020-5966US | high7.8 | — | ||
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, in which a NULL pointer is dereferenced… | ||||
| CVE-2020-5965US | medium5.5 | — | ||
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX 11 user mode driver (nvwgf2um/x.dll), in which a specially crafted shader can cause an out… | ||||
| CVE-2020-5964US | high7.8OT elevated | — | ||
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host component, in which the application resources integrity check may be missed. Such an a… | ||||
| CVE-2020-5963US | high7.8 | — | ||
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, deni… | ||||
| CVE-2020-5962US | high7.8 | — | ||
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component, in which an attacker with local system access can corrupt a system… | ||||
02
references
External citations — patches, advisories, analysis.
- Nvidia Security Bulletin vom 2020-06-24external
- Lenovo Security Advisory LEN-36925 vom 2020-07-14external
- Lenovo Security Advisory: LEN-43116external
- Ubuntu Security Notice USN-4404-1 vom 2020-06-25external
- Ubuntu Security Notice USN-4404-2 vom 2020-06-25external
- WID-SEC-W-2025-1860 - CSAF Versionself
- WID-SEC-2025-1860 - Portal Versionself
- Dell Security Advisory DSA-2020-212 vom 2025-08-18external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan