Lucene search

K
cve[email protected]CVE-2015-5053
HistoryNov 24, 2015 - 8:59 p.m.

CVE-2015-5053

2015-11-2420:59:02
CWE-284
web.nvd.nist.gov
19
nvidia
gpu
graphics driver
r346
r352
linux
grid vgpu
vsga
privilege escalation
denial of service
cve-2015-5053
nvd

7.7 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

65.1%

The host memory mapping path feature in the NVIDIA GPU graphics driver R346 before 346.87 and R352 before 352.41 for Linux and R352 before 352.46 for GRID vGPU and vSGA does not properly restrict access to third-party device IO memory, which allows attackers to gain privileges, cause a denial of service (resource consumption), or possibly have unspecified other impact via unknown vectors related to the follow_pfn kernel-mode API call.

Affected configurations

NVD
Node
nvidiagpu_driverMatch346.16
OR
nvidiagpu_driverMatch346.22
OR
nvidiagpu_driverMatch346.35
OR
nvidiagpu_driverMatch346.47
OR
nvidiagpu_driverMatch346.59
OR
nvidiagpu_driverMatch346.72
OR
nvidiagpu_driverMatch346.82
OR
nvidiagpu_driverMatch352.09
OR
nvidiagpu_driverMatch352.21
OR
nvidiagpu_driverMatch352.30
OR
nvidiagpu_driverMatch352.41

7.7 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

65.1%