Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-3979

Опубликовано: 01 апр. 2019
Источник: nvd
CVSS3: 7.4
CVSS3: 6.5
CVSS2: 4.3
EPSS Низкий

Описание

A remote denial-of-service vulnerability exists in the way the Nouveau Display Driver (the default Ubuntu Nvidia display driver) handles GPU shader execution. A specially crafted pixel shader can cause remote denial-of-service issues. An attacker can provide a specially crafted website to trigger this vulnerability. This vulnerability can be triggered remotely after the user visits a malformed website. No further user interaction is required. Vulnerable versions include Ubuntu 18.04 LTS (linux 4.15.0-29-generic x86_64), Nouveau Display Driver NV117 (vermagic: 4.15.0-29-generic SMP mod_unload).

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
Конфигурация 2

Одновременно

cpe:2.3:o:nvidia:geforce_gtx_745_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:geforce_gtx_745:-:*:*:*:*:*:*:*
Конфигурация 3

Одновременно

cpe:2.3:o:nvidia:geforce_gtx_750_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:geforce_gtx_750:-:*:*:*:*:*:*:*
Конфигурация 4

Одновременно

cpe:2.3:o:nvidia:geforce_gtx_750_ti_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:geforce_gtx_750_ti:-:*:*:*:*:*:*:*
Конфигурация 5

Одновременно

cpe:2.3:o:nvidia:geforce_gtx_840m_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:geforce_gtx_840m:-:*:*:*:*:*:*:*
Конфигурация 6

Одновременно

cpe:2.3:o:nvidia:geforce_gtx_845m_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:geforce_gtx_845m:-:*:*:*:*:*:*:*
Конфигурация 7

Одновременно

cpe:2.3:o:nvidia:geforce_gtx_850m_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:geforce_gtx_850m:-:*:*:*:*:*:*:*
Конфигурация 8

Одновременно

cpe:2.3:o:nvidia:geforce_gtx_860m_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:geforce_gtx_860m:-:*:*:*:*:*:*:*
Конфигурация 9

Одновременно

cpe:2.3:o:nvidia:geforce_gtx_950m_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:geforce_gtx_950m:-:*:*:*:*:*:*:*
Конфигурация 10

Одновременно

cpe:2.3:o:nvidia:geforce_gtx_960m_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:geforce_gtx_960m:-:*:*:*:*:*:*:*
Конфигурация 11

Одновременно

cpe:2.3:o:nvidia:quadro_k620_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:quadro_k620:-:*:*:*:*:*:*:*
Конфигурация 12

Одновременно

cpe:2.3:o:nvidia:quadro_k1200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:quadro_k1200:-:*:*:*:*:*:*:*
Конфигурация 13

Одновременно

cpe:2.3:o:nvidia:quadro_k2200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:quadro_k2200:-:*:*:*:*:*:*:*
Конфигурация 14

Одновременно

cpe:2.3:o:nvidia:quadro_m1000m_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:quadro_m1000m:-:*:*:*:*:*:*:*
Конфигурация 15

Одновременно

cpe:2.3:o:nvidia:quadro_m1200m_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:quadro_m1200m:-:*:*:*:*:*:*:*
Конфигурация 16

Одновременно

cpe:2.3:o:nvidia:grid_m30_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:grid_m30:-:*:*:*:*:*:*:*
Конфигурация 17

Одновременно

cpe:2.3:o:nvidia:grid_m40_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:grid_m40:-:*:*:*:*:*:*:*

EPSS

Процентиль: 63%
0.00437
Низкий

7.4 High

CVSS3

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-400

Связанные уязвимости

ubuntu логотип

CVE-2018-3979

CVSS3: 6.5
ubuntu
почти 7 лет назад

A remote denial-of-service vulnerability exists in the way the Nouveau Display Driver (the default Ubuntu Nvidia display driver) handles GPU shader execution. A specially crafted pixel shader can cause remote denial-of-service issues. An attacker can provide a specially crafted website to trigger this vulnerability. This vulnerability can be triggered remotely after the user visits a malformed website. No further user interaction is required. Vulnerable versions include Ubuntu 18.04 LTS (linux 4.15.0-29-generic x86_64), Nouveau Display Driver NV117 (vermagic: 4.15.0-29-generic SMP mod_unload).

debian логотип

CVE-2018-3979

CVSS3: 6.5
debian
почти 7 лет назад

A remote denial-of-service vulnerability exists in the way the Nouveau ...

github логотип

GHSA-m48r-fqqr-r9gc

CVSS3: 6.5
github
больше 3 лет назад

A remote denial-of-service vulnerability exists in the way the Nouveau Display Driver (the default Ubuntu Nvidia display driver) handles GPU shader execution. A specially crafted pixel shader can cause remote denial-of-service issues. An attacker can provide a specially crafted website to trigger this vulnerability. This vulnerability can be triggered remotely after the user visits a malformed website. No further user interaction is required. Vulnerable versions include Ubuntu 18.04 LTS (linux 4.15.0-29-generic x86_64), Nouveau Display Driver NV117 (vermagic: 4.15.0-29-generic SMP mod_unload).

EPSS

Процентиль: 63%
0.00437
Низкий

7.4 High

CVSS3

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-400