Lucene search

K
lenovoLenovoLENOVO:PS500124-NOSID
HistoryMar 11, 2018 - 2:36 p.m.

NVIDIA GPU Display driver contains multiple vulnerabilities in the kernel mode layer handler - us

2018-03-1114:36:00
support.lenovo.com
255

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

10.7%

Lenovo Security Advisory: LEN-14587

Potential Impact: Denial of service or privilege escalation

Severity: High

**Scope of Impact:**Industry-Wide

**CVE Identifiers:**CVE-2017-0341, CVE-2017-0342, CVE-2017-0343, CVE-2017-0344, CVE-2017-0345, CVE-2017-0346, CVE-2017-0347, CVE-2017-0348, CVE-2017-0349, CVE-2017-0350, CVE-2017-0351, CVE-2017-0352, CVE-2017-0353, CVE-2017-0354, CVE-2017-0355

Summary Description:

NVIDIA has released an update for GPU drivers that fixes multiple denial of service and privilege escalation vulnerabilities. See the NVIDIA advisory located here for more details.

Mitigation Strategy for Customers (what you should do to protect yourself):

Update to the latest NVIDIA Graphics Driver version available for your system.

Product Impact:

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

10.7%