Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-0317

Опубликовано: 15 фев. 2017
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 6.9
CVSS3: 7.5

Описание

All versions of NVIDIA GPU and GeForce Experience installer contain a vulnerability where it fails to set proper permissions on the package extraction path thus allowing a non-privileged user to tamper with the extracted files, potentially leading to escalation of privileges via code execution.

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

precise

not-affected

superseded
trusty

DNE

trusty/esm

DNE

upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

DNE

yakkety

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [no update available]]
precise

ignored

end of life
trusty

ignored

end of standard support
trusty/esm

DNE

trusty was ignored [no update available]
upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

DNE

yakkety

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

precise

not-affected

Windows specific
trusty

DNE

trusty/esm

DNE

upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

DNE

yakkety

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

Windows specific
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [Windows specific]]
esm-infra/xenial

not-affected

Windows specific
precise

not-affected

Windows specific
trusty

not-affected

Windows specific
trusty/esm

DNE

trusty was not-affected [Windows specific]
upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

not-affected

Windows specific

Показывать по

РелизСтатусПримечание
devel

not-affected

superseded
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [superseded]]
esm-infra/xenial

not-affected

superseded
precise

not-affected

superseded
trusty

not-affected

superseded
trusty/esm

DNE

trusty was not-affected [superseded]
upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

not-affected

superseded

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [superseded]]
precise

DNE

trusty

not-affected

superseded
trusty/esm

DNE

trusty was not-affected [superseded]
upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

DNE

yakkety

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [superseded]]
precise

not-affected

superseded
trusty

not-affected

superseded
trusty/esm

DNE

trusty was not-affected [superseded]
upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

DNE

yakkety

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [superseded]]
precise

not-affected

superseded
trusty

not-affected

superseded
trusty/esm

DNE

trusty was not-affected [superseded]
upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

DNE

yakkety

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [superseded]]
precise

not-affected

superseded
trusty

not-affected

superseded
trusty/esm

DNE

trusty was not-affected [superseded]
upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

DNE

yakkety

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [superseded]]
precise

not-affected

superseded
trusty

not-affected

superseded
trusty/esm

DNE

trusty was not-affected [superseded]
upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

DNE

yakkety

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

Windows specific
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [Windows specific]]
esm-infra/xenial

not-affected

Windows specific
precise

not-affected

Windows specific
trusty

not-affected

Windows specific
trusty/esm

DNE

trusty was not-affected [Windows specific]
upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

not-affected

Windows specific

Показывать по

РелизСтатусПримечание
devel

not-affected

superseded
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [superseded]]
esm-infra/xenial

not-affected

superseded
precise

not-affected

superseded
trusty

not-affected

superseded
trusty/esm

DNE

trusty was not-affected [superseded]
upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

not-affected

superseded

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [superseded]]
precise

DNE

trusty

not-affected

superseded
trusty/esm

DNE

trusty was not-affected [superseded]
upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

DNE

yakkety

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [superseded]]
precise

DNE

trusty

not-affected

superseded
trusty/esm

DNE

trusty was not-affected [superseded]
upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

DNE

yakkety

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

superseded
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [superseded]]
esm-infra/xenial

not-affected

superseded
precise

DNE

trusty

not-affected

superseded
trusty/esm

DNE

trusty was not-affected [superseded]
upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

not-affected

superseded

Показывать по

РелизСтатусПримечание
devel

not-affected

superseded
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [superseded]]
esm-infra/xenial

not-affected

superseded
precise

DNE

trusty

not-affected

superseded
trusty/esm

DNE

trusty was not-affected [superseded]
upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

not-affected

superseded

Показывать по

РелизСтатусПримечание
devel

not-affected

superseded
esm-infra-legacy/trusty

DNE

esm-infra/xenial

not-affected

superseded
precise

DNE

trusty

DNE

trusty/esm

DNE

upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

not-affected

superseded

Показывать по

РелизСтатусПримечание
devel

not-affected

Windows specific
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [Windows specific]]
esm-infra/xenial

not-affected

Windows specific
precise

DNE

trusty

not-affected

Windows specific
trusty/esm

DNE

trusty was not-affected [Windows specific]
upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

not-affected

Windows specific

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

precise

not-affected

Windows specific
trusty

DNE

trusty/esm

DNE

upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

DNE

yakkety

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

precise

not-affected

Windows specific
trusty

DNE

trusty/esm

DNE

upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

DNE

yakkety

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

precise

not-affected

superseded
trusty

DNE

trusty/esm

DNE

upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

DNE

yakkety

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

precise

not-affected

superseded
trusty

DNE

trusty/esm

DNE

upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

DNE

yakkety

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

precise

not-affected

Windows specific
trusty

DNE

trusty/esm

DNE

upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

DNE

yakkety

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

precise

not-affected

superseded
trusty

DNE

trusty/esm

DNE

upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

DNE

yakkety

DNE

Показывать по

EPSS

Процентиль: 11%
0.00036
Низкий

6.9 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
nvd
почти 9 лет назад

All versions of NVIDIA GPU and GeForce Experience installer contain a vulnerability where it fails to set proper permissions on the package extraction path thus allowing a non-privileged user to tamper with the extracted files, potentially leading to escalation of privileges via code execution.

CVSS3: 7.5
github
больше 3 лет назад

All versions of NVIDIA GPU and GeForce Experience installer contain a vulnerability where it fails to set proper permissions on the package extraction path thus allowing a non-privileged user to tamper with the extracted files, potentially leading to escalation of privileges via code execution.

EPSS

Процентиль: 11%
0.00036
Низкий

6.9 Medium

CVSS2

7.5 High

CVSS3

Уязвимость CVE-2017-0317