All versions of the NVIDIA GPU Display Driver contain a vulnerability in the GPU firmware where incorrect access control may allow CPU access sensitive GPU control registers, leading to an escalation of privileges
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nvidia-graphics-drivers | Jul 30, 2024 | May 9, 2017 |
| Freebsd | — | Upgrade nvidia-driver | May 24, 2017 | May 23, 2017 |
| Oracle Solaris | — | Upgrade driver/graphics/nvidia to version 0.375.66.0-0.175.3.22.0.1.0 on Solaris 11.3Upgrade driver/graphics/nvidiaR304 to version 0.304.135.0-0.175.3.22.0.1.0 on Solaris 11.3Upgrade driver/graphics/nvidiaR340 to version 0.340.102.0-0.175.3.22.0.1.0 on Solaris 11.3 | Jul 19, 2017 | May 9, 2017 |
| Ubuntu | — | Upgrade nvidia-367Upgrade nvidia-375 | May 31, 2017 | May 9, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub