Lucene search

[email protected]CVE-2022-34666

HistoryNov 10, 2022 - 4:15 p.m.

CVE-2022-34666

2022-11-1016:15:10

CWE-476

[email protected]

web.nvd.nist.gov

nvidia

gpu

display driver

windows

linux

vulnerability

cve-2022-34666

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a local user with basic capabilities can cause a null-pointer dereference, which may lead to denial of service.

Affected configurations

NVD

Node

nvidiavirtual_gpuRange<11.9

nvidiavirtual_gpuRange13.0–13.4

nvidiavirtual_gpuRange14.0–14.2

AND

linuxlinux_kernelMatch-

microsoftwindowsMatch-

Node

nvidiacloud_gamingRange<516.94

AND

microsoftwindowsMatch-

Node

nvidiacloud_gamingRange<515.65.01

AND

citrixhypervisorMatch-

linuxlinux_kernelMatch-

redhatenterprise_linux_kernel-based_virtual_machineMatch-

CPENameOperatorVersion
nvidia:virtual_gpunvidia virtual gpult11.9
nvidia:virtual_gpunvidia virtual gpult13.4
nvidia:virtual_gpunvidia virtual gpult14.2

CPE	Name	Operator	Version
nvidia:virtual_gpu	nvidia virtual gpu	lt	11.9
nvidia:virtual_gpu	nvidia virtual gpu	lt	13.4
nvidia:virtual_gpu	nvidia virtual gpu	lt	14.2

CNA Affected

[
  {
    "vendor": "NVIDIA",
    "product": "NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager)",
    "versions": [
      {
        "version": "All versions prior to the August 2022 release",
        "status": "affected"
      }
    ]
  }
]