CVE-2016-7382

Опубликовано: 08 нояб. 2016

Источник: nvd

CVSS3: 7.8

CVSS2: 7.2

EPSS Низкий

Описание

For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows or nvidia.ko for Linux) handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges.

Ссылки

http://nvidia.custhelp.com/app/answers/detail/a_id/4246
Patch
Vendor Advisory
http://nvidia.custhelp.com/app/answers/detail/a_id/4247
Patch
Vendor Advisory
http://www.securityfocus.com/bid/94177
Third Party Advisory
VDB Entry
https://support.lenovo.com/us/en/solutions/LEN-10822
http://nvidia.custhelp.com/app/answers/detail/a_id/4246
Patch
Vendor Advisory
http://nvidia.custhelp.com/app/answers/detail/a_id/4247
Patch
Vendor Advisory
http://www.securityfocus.com/bid/94177
Third Party Advisory
VDB Entry
https://support.lenovo.com/us/en/solutions/LEN-10822

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:nvidia:gpu_driver:304.131:*:*:*:*:*:*:*

cpe:2.3:a:nvidia:gpu_driver:340.98:*:*:*:*:*:*:*

cpe:2.3:a:nvidia:gpu_driver:361.93.02:*:*:*:*:*:*:*

cpe:2.3:a:nvidia:gpu_driver:367.44:*:*:*:*:*:*:*

cpe:2.3:a:nvidia:gpu_driver:367.54:*:*:*:*:*:*:*

cpe:2.3:a:nvidia:gpu_driver:370.23:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:nvidia:geforce_910m:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:geforce_920m:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:geforce_920mx:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:geforce_930m:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:geforce_930mx:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:geforce_940m:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:geforce_940mx:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:geforce_945m:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:geforce_gt_710:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:geforce_gt_730:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:geforce_gtx_1050:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:geforce_gtx_1060:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:geforce_gtx_1070:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:geforce_gtx_1080:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:geforce_gtx_950m:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:geforce_gtx_960m:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:geforce_gtx_965m:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:nvs_310:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:nvs_315:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:nvs_510:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:nvs_810:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:quadro_k1200:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:quadro_k420:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:quadro_k620:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:quadro_m1000m:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:quadro_m2000:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:quadro_m2000m:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:quadro_m3000m:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:quadro_m4000:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:quadro_m4000m:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:quadro_m5000:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:quadro_m5000m:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:quadro_m500m:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:quadro_m5500:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:quadro_m6000:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:quadro_m600m:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:quadro_p5000:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:quadro_p6000:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:telsa_k80:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:tesla_c2050:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:tesla_c2070:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:tesla_c2075:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:tesla_k10:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:tesla_k20:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:tesla_k20x:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:tesla_k40:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:tesla_k8:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:tesla_k80:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:tesla_m2050:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:tesla_m2070:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:tesla_m2075:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:tesla_m2090:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:tesla_m40:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:tesla_m6:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:tesla_m60:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:tesla_p100:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:tesla_p4:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:tesla_p40:-:*:*:*:*:*:*:*

cpe:2.3:h:nvidia:titan_x:-:*:*:*:*:*:*:*

EPSS

Процентиль: 15%

0.00048

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-275

Связанные уязвимости

CVE-2016-7382

CVSS3: 7.8

ubuntu

около 9 лет назад

CVE-2016-7382

CVSS3: 7.8

debian

около 9 лет назад

For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Di ...

GHSA-mv66-58mr-wjh5

CVSS3: 7.8

github

больше 3 лет назад

EPSS

Процентиль: 15%

0.00048

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-275