DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Nvidia Treiber: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2024-02-28
Ein lokaler Angreifer kann mehrere Schwachstellen in Nvidia Treiber ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode auszuführen, einen Denial of Service Zustand herbeizuführen, Informationen offenzulegen, oder Dateien zu manipulieren.
01
beschreibt (9)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-0079US | — | — | ||
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user in a guest VM can cause a NULL-pointer dereference in the host. A su… | ||||
| CVE-2024-0078US | — | — | ||
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user in a guest can cause a NULL-pointer dereference in the host, which m… | ||||
| CVE-2024-0077US | — | — | ||
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, where it allows a guest OS to allocate resources for which the guest OS is not authorized. A successful expl… | ||||
| CVE-2024-0075US | — | — | ||
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user may cause a NULL-pointer dereference by accessing passed parameters the validity of which has… | ||||
| CVE-2024-0074US | — | — | ||
NVIDIA GPU Display Driver for Linux contains a vulnerability where an attacker may access a memory location after the end of the buffer. A successful exploit of this vulnerability… | ||||
| CVE-2024-0073US | — | — | ||
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer when the driver is performing an operation at a privilege level that is higher than the mini… | ||||
| CVE-2024-0071US | — | — | ||
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds write. A successful exploit of… | ||||
| CVE-2022-42265US | high7.1 | — | ||
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow may lead to information disclosure or data tampering. | ||||
| CVE-2022-4226US | medium4.8 | — | ||
The Simple Basic Contact Form WordPress plugin before 20221201 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform St… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Debian Security Advisory DLA-4752 vom 2026-08-24external
- SUSE Security Update SUSE-SU-2024:0772-1 vom 2024-03-05external
- SUSE Security Update SUSE-SU-2024:0770-1 vom 2024-03-05external
- NVIDIA Security Bulletin vom 2024-02-28external
- XEROX Security Advisory XRX24-005 vom 2024-03-04external
- HP Security Bulletin HPSBHF03923 vom 2024-03-08external
- Lenovo Security Advisory LEN-150808 vom 2024-03-13external
- WID-SEC-W-2024-0512 - CSAF Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan