DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Nvidia Treiber: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2022-05-17
Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Nvidia Treiber ausnutzen, um beliebigen Code auszuführen, einen Denial of Service Zustand zu verursachen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.
01
beschreibt (12)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-28192US | low1.9 | — | ||
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where it may lead to a use-after-free, which in turn may cause denial of service. This attack… | ||||
| CVE-2022-28191US | medium5.5 | — | ||
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where uncontrolled resource consumption can be triggered by an unprivileged regular user, whic… | ||||
| CVE-2022-28190US | low2.1 | — | ||
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where improper input validation can cause denial o… | ||||
| CVE-2022-28189US | low2.1 | — | ||
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a NULL pointer dereference may lead to a sys… | ||||
| CVE-2022-28188US | medium4.9 | — | ||
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where the product receives input or data, but does… | ||||
| CVE-2022-28187US | medium4.9 | — | ||
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where the memory management software does not release a resource after its e… | ||||
| CVE-2022-28186US | low3.6 | — | ||
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where the product receives input or data, but does… | ||||
| CVE-2022-28185US | high7.1 | — | ||
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the ECC layer, where an unprivileged regular user can cause an out-of-bounds write, which may lead to de… | ||||
| CVE-2022-28184US | high7.8 | — | ||
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an unprivileged regular user can a… | ||||
| CVE-2022-28183US | high7.1 | — | ||
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause an out-of-bounds read, which may lea… | ||||
| CVE-2022-28182US | medium6.8 | — | ||
NVIDIA GPU Display Driver for Windows contains a vulnerability in the DirectX11 user mode driver (nvwgf2um/x.dll), where an unauthorized attacker on the network can cause an out-of… | ||||
| CVE-2022-28181US | critical9.9 | — | ||
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network can cause an out-of-bounds writ… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Debian Security Advisory DLA-4752 vom 2026-08-24external
- Security Bulletin: NVIDIA GPU Display Driver - May 2022 vom 2022-05-17external
- Gentoo Linux Security Advisory GLSA-202310-02 vom 2023-10-03external
- HP Security Bulletin HPSBHF03795 vom 2022-06-08external
- Lenovo Security Advisoryexternal
- WID-SEC-W-2022-0202 - CSAF Versionself
- WID-SEC-2022-0202 - Portal Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan