Lucene search

K
cve[email protected]CVE-2023-0199
HistoryApr 22, 2023 - 3:15 a.m.

CVE-2023-0199

2023-04-2203:15:08
CWE-787
web.nvd.nist.gov
42
nvidia
gpu
display driver
vulnerability
out-of-bounds write
denial of service
data tampering
nvd

6.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds write can lead to denial of service and data tampering.

Affected configurations

NVD
Node
nvidiagpu_display_driverRange470470.182.03linux
OR
nvidiagpu_display_driverRange515515.105.01linux
OR
nvidiagpu_display_driverRange525525.105.17linux
OR
nvidiagpu_display_driverRange530530.41.03linux
AND
nvidiageforceMatch-
OR
nvidianvsMatch-
OR
nvidiaquadroMatch-
OR
nvidiartxMatch-
Node
nvidiagpu_display_driverRange450450.236.01linux
AND
nvidiateslaMatch-
Node
nvidiagpu_display_driverRange450454.14windows
AND
nvidiateslaMatch-
Node
nvidiagpu_display_driverRange470474.30windows
OR
nvidiagpu_display_driverRange515518.03windows
AND
nvidianvsMatch-
OR
nvidiaquadroMatch-
OR
nvidiartxMatch-
Node
nvidiagpu_display_driverRange525528.89windows
OR
nvidiagpu_display_driverRange530531.41windows
AND
nvidiastudioMatch-
Node
nvidiagpu_display_driverRange470474.30windows
OR
nvidiagpu_display_driverRange530531.41windows
AND
nvidiageforceMatch-

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "NVIDIA GPU Display Driver",
    "vendor": "NVIDIA",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to and including 15.1, 13.6, 11.11, and all versions prior to and including February 2023 release"
      }
    ]
  }
]

6.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%