DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Nvidia Treiber: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2022-11-30
Ein lokaler Angreifer kann mehrere Schwachstellen im Nvidia Treiber ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand auszulösen, seine Privilegien zu erweitern und Daten zu manipulieren.
01
beschreibt (30)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-42267US | high7.8OT erhöht | — | ||
NVIDIA GPU Display Driver for Windows contains a vulnerability where a regular user can cause an out-of-bounds read, which may lead to code execution, denial of service, escalation… | ||||
| CVE-2022-42266US | low3.3 | — | ||
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an unprivileged regular user can cause expos… | ||||
| CVE-2022-42265US | high7.1 | — | ||
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow may lead to information disclosure or data tampering. | ||||
| CVE-2022-42264US | high7.8 | — | ||
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause the use of an out-of-range pointer offset, which… | ||||
| CVE-2022-42263US | high7.1 | — | ||
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an Integer overflow may lead to denial of service or information disclosure. | ||||
| CVE-2022-42262US | high7.8 | — | ||
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffer overrun, which in turn may c… | ||||
| CVE-2022-42261US | high7.8 | — | ||
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffer overrun, which in turn may c… | ||||
| CVE-2022-42260US | high7.8 | — | ||
NVIDIA vGPU Display Driver for Linux guest contains a vulnerability in a D-Bus configuration file, where an unauthorized user in the guest VM can impact protected D-Bus endpoints,… | ||||
| CVE-2022-42259US | medium5.5 | — | ||
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow may lead to denial of service. | ||||
| CVE-2022-42258US | high7.3 | — | ||
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow may lead to denial of service, data tampering, or infor… | ||||
| CVE-2022-42257US | high7.3 | — | ||
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow may lead to information disclosure, data tampering or d… | ||||
| CVE-2022-42256US | high7.8 | — | ||
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow in index validation may lead to denial of service, info… | ||||
| CVE-2022-42255US | high7.8 | — | ||
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lead to denial of service, information di… | ||||
| CVE-2022-42254US | high7.8 | — | ||
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lead to denial of service, data tampering… | ||||
| CVE-2022-34684US | high7.1 | — | ||
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an off-by-one error may lead to data tampering or information disclosure. | ||||
| CVE-2022-34683US | medium5.5 | Exploit | ||
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a null-pointer dereference occurs, which may… | ||||
| CVE-2022-34682US | medium5.5 | — | ||
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause a null-pointer dereference, which may lead to de… | ||||
| CVE-2022-34681US | medium5.5 | — | ||
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler, where improper input validation of a display-related data structure… | ||||
| CVE-2022-34680US | medium5.5 | — | ||
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an integer truncation can lead to an out-of-bounds read, which may lead to deni… | ||||
| CVE-2022-34679US | medium5.5 | — | ||
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unhandled return value can lead to a null-pointer dereference, which may lea… | ||||
20 von 30 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Debian Security Advisory DLA-3418 vom 2023-05-11external
- Debian Security Advisory DLA-4752 vom 2026-08-24external
- Security Bulletin: NVIDIA GPU Display Driver - November 2022 vom 2022-11-30external
- XEROX Security Advisory XRX24-004 vom 2024-03-04external
- XEROX Security Advisory XRX24-005 vom 2024-03-04external
- Gentoo Linux Security Advisory GLSA-202310-02 vom 2023-10-03external
- HP Security Bulletin HPSBHF03832 vom 2023-01-21external
- HP Security Bulletin HPSBHF03867 vom 2023-09-12external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan