DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Nvidia Treiber: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2023-03-30
Ein Angreifer kann mehrere Schwachstellen im Nvidia Treiber ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, seine Privilegien zu erweitern und Daten zu manipulieren.
01
beschreibt (18)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-0199US | medium6.1 | — | ||
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds write can lead to denial of service and data tampe… | ||||
| CVE-2023-0190US | medium5.5 | — | ||
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a NULL pointer dereference may lead to denial of service. | ||||
| CVE-2023-0184US | high7.8 | — | ||
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler which may lead to denial of service, escalation of privileges, information… | ||||
| CVE-2023-0198US | high7.8 | — | ||
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where improper restriction of operations within the bounds of a memory buffer can lead to den… | ||||
| CVE-2023-0197US | medium6.5 | — | ||
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious user in a guest VM can cause a NULL-pointer dereference, which may lead to denial of ser… | ||||
| CVE-2023-0195US | low2.4 | — | ||
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer driver nvlddmkm.sys, where an can cause CWE-1284,
which may lead to hypothetical Information… | ||||
| CVE-2023-0194US | medium4.6 | — | ||
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer driver, where an invalid display configuration may lead to denial of service. | ||||
| CVE-2023-0192US | high7.8 | — | ||
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer handler, where improper privilege management can lead to escalation of privileges and inform… | ||||
| CVE-2023-0191US | high7.1 | — | ||
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds access may lead to denial of service or data tampe… | ||||
| CVE-2023-0189US | high7.8 | — | ||
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler which may lead to code execution, denial of service, escalation of privileges, informa… | ||||
| CVE-2023-0188US | medium5.5 | — | ||
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged user can cause improper restriction of operations w… | ||||
| CVE-2023-0187US | medium5.5 | — | ||
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read can lead to denial of service. | ||||
| CVE-2023-0186US | high7.1 | — | ||
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an out-of-bounds write can lead to denial of service and data tampering. | ||||
| CVE-2023-0185US | high7.1 | — | ||
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where sign conversion issuescasting an unsigned primitive to signed may lead to denial of ser… | ||||
| CVE-2023-0183US | high7.1 | — | ||
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an out-of-bounds write can lead to denial of service and data tampering. | ||||
| CVE-2023-0182US | high7.8 | — | ||
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an out-of-bounds write can lead to denial of service, information disclosure, and dat… | ||||
| CVE-2023-0181US | high7.1OT erhöht | — | ||
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a kernel mode layer handler, where memory permissions are not correctly checked, which may lead to denia… | ||||
| CVE-2023-0180US | high7.1 | — | ||
NVIDIA GPU Display Driver for Linux contains a vulnerability in a kernel mode layer handler, which may lead to denial of service or information disclosure. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Debian Security Advisory DLA-4752 vom 2026-08-24external
- Security Bulletin: NVIDIA GPU Display Driver - March 2023 vom 2023-03-30external
- XEROX Security Advisory XRX24-004 vom 2024-03-04external
- XEROX Security Advisory XRX24-005 vom 2024-03-04external
- Gentoo Linux Security Advisory GLSA-202310-02 vom 2023-10-03external
- HP Security Bulletin HPSBHF03843 vom 2023-05-09external
- Lenovo Security Advisory: LEN-120653external
- WID-SEC-W-2023-0810 - CSAF Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan