All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used in an offset calculation may lead to denial of service or potential escalation of privileges.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nvidia-graphics-drivers | Jul 30, 2024 | May 9, 2017 |
| Freebsd | — | Upgrade nvidia-driver | May 24, 2017 | May 23, 2017 |
| Oracle Solaris | — | Upgrade driver/graphics/nvidiaR340 to version 0.340.102.0-0.175.3.22.0.1.0 on Solaris 11.3Upgrade driver/graphics/nvidia to version 0.375.66.0-0.175.3.22.0.1.0 on Solaris 11.3Upgrade driver/graphics/nvidiaR304 to version 0.304.135.0-0.175.3.22.0.1.0 on Solaris 11.3 | Jul 19, 2017 | May 9, 2017 |
| Ubuntu | — | Upgrade nvidia-375Upgrade nvidia-367 | May 31, 2017 | May 9, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub