DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Nvidia GPU Display Treiber: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2021-07-20
Ein lokaler Angreifer kann mehrere Schwachstellen in Nvidia GPU Display Treibern ausnutzen, um einen Denial of Service zu verursachen, Code zur Ausführung zu bringen, seine Rechte zu erweitern und Informationen offenzulegen.
01
beschreibt (8)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-1096US | medium5.5 | — | ||
NVIDIA Windows GPU Display Driver for Windows contains a vulnerability in the NVIDIA kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where dereferencing a NULL pointer m… | ||||
| CVE-2021-1095US | medium5.5 | — | ||
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handlers for all control calls with embedded parameters where deref… | ||||
| CVE-2021-1094US | medium6.1 | — | ||
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where an out of bounds array access may l… | ||||
| CVE-2021-1093US | medium5.5 | — | ||
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in firmware where the driver contains an assert() or similar statement that can be triggered by an attacker… | ||||
| CVE-2021-1092US | high7.1 | — | ||
NVIDIA GPU Display Driver for Windows contains a vulnerability in the NVIDIA Control Panel application where it is susceptible to a Windows file system symbolic link attack where a… | ||||
| CVE-2021-1091US | high7.1 | — | ||
NVIDIA GPU Display driver for Windows contains a vulnerability where an unprivileged user can create a file hard link that causes the driver to overwrite a file that requires eleva… | ||||
| CVE-2021-1090US | high7.1 | — | ||
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for control calls where the software reads or writes to a b… | ||||
| CVE-2021-1089US | high7.8 | — | ||
NVIDIA GPU Display Driver for Windows contains a vulnerability in nvidia-smi where an uncontrolled DLL loading path may lead to arbitrary code execution, denial of service, informa… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Debian Security Advisory DLA-2888 vom 2022-01-18external
- NVIDIA GPU Display Driver Security Bulletin vom 2021-07-20external
- Arch Linux Security Advisory ASA-202107-58 vom 2021-07-22external
- Gentoo Linux Security Advisory GLSA-202310-02 vom 2023-10-03external
- Lenovo Security Advisory LEN-65136 vom 2021-08-10external
- WID-SEC-W-2023-2533 - CSAF Versionself
- WID-SEC-2023-2533 - Portal Versionself
- EMC Security Advisory DSA-2021-183 vom 2022-01-28external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan