Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2018-6260

Опубликовано: 13 нояб. 2018
Источник: debian

Описание

NVIDIA graphics driver contains a vulnerability that may allow access to application data processed on the GPU through a side channel exposed by the GPU performance counters. Local user access is required. This is not a network or remote attack vector.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
nvidia-graphics-driversfixed418.43-1experimentalpackage
nvidia-graphics-driversfixed410.104-1package
nvidia-graphics-driversfixed390.116-1stretchpackage
nvidia-graphics-driversno-dsajessiepackage
nvidia-graphics-drivers-legacy-390xxfixed390.116-1package
nvidia-graphics-drivers-legacy-390xxno-dsabusterpackage
nvidia-graphics-drivers-legacy-340xxunfixedpackage
nvidia-graphics-drivers-legacy-340xxignoredbusterpackage
nvidia-graphics-drivers-legacy-340xxignoredstretchpackage
nvidia-graphics-drivers-legacy-304xxunfixedpackage
nvidia-graphics-drivers-legacy-304xxignoredstretchpackage
nvidia-graphics-drivers-legacy-304xxno-dsajessiepackage

Примечания

  • https://nvidia.custhelp.com/app/answers/detail/a_id/4738

  • https://nvidia.custhelp.com/app/answers/detail/a_id/4772

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 7 лет назад

NVIDIA graphics driver contains a vulnerability that may allow access to application data processed on the GPU through a side channel exposed by the GPU performance counters. Local user access is required. This is not a network or remote attack vector.

CVSS3: 5.5
nvd
около 7 лет назад

NVIDIA graphics driver contains a vulnerability that may allow access to application data processed on the GPU through a side channel exposed by the GPU performance counters. Local user access is required. This is not a network or remote attack vector.

CVSS3: 5.5
github
больше 3 лет назад

NVIDIA graphics driver contains a vulnerability that may allow access to application data processed on the GPU through a side channel exposed by the GPU performance counters. Local user access is required. This is not a network or remote attack vector.

CVSS3: 3.3
fstec
почти 7 лет назад

Уязвимость программного обеспечения графических процессоров NVIDIA GeForce, Quadro и Tesla, позволяющая нарушителю раскрыть защищаемую информацию