CVE-2015-5950

2015-09-3001:59:17

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.2

Confidence

Low

EPSS

Percentile

5.1%

JSON

The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304.128, R340 before 340.93, and R352 before 352.41 on Linux; and R352 before 352.46 on GRID vGPU and vSGA allows local users to write to an arbitrary kernel memory location and consequently gain privileges via a crafted ioctl call.

Affected configurations

Nvd

Node

nvidiagpu_driverRange≤352.30

Node

nvidiadisplay_driverRange≤352.09linux

nvidiadisplay_driverMatch304.108linux

nvidiadisplay_driverMatch304.119linux

nvidiadisplay_driverMatch304.121linux

nvidiadisplay_driverMatch304.123linux

nvidiadisplay_driverMatch304.125linux

nvidiadisplay_driverMatch352.21linux

nvidiadisplay_driverMatch352.30linux

Node

nvidiadisplay_driverRange≤352.86

nvidiadisplay_driverMatch340.43

nvidiadisplay_driverMatch340.52

nvidiadisplay_driverMatch341.44

nvidiadisplay_driverMatch353.06

AND

microsoftwindows

VendorProductVersionCPE
nvidiagpu_driver*cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*
nvidiadisplay_driver*cpe:2.3:a:nvidia:display_driver:*:*:*:*:*:linux:*:*
nvidiadisplay_driver304.108cpe:2.3:a:nvidia:display_driver:304.108:*:*:*:*:linux:*:*
nvidiadisplay_driver304.119cpe:2.3:a:nvidia:display_driver:304.119:*:*:*:*:linux:*:*
nvidiadisplay_driver304.121cpe:2.3:a:nvidia:display_driver:304.121:*:*:*:*:linux:*:*
nvidiadisplay_driver304.123cpe:2.3:a:nvidia:display_driver:304.123:*:*:*:*:linux:*:*
nvidiadisplay_driver304.125cpe:2.3:a:nvidia:display_driver:304.125:*:*:*:*:linux:*:*
nvidiadisplay_driver352.21cpe:2.3:a:nvidia:display_driver:352.21:*:*:*:*:linux:*:*
nvidiadisplay_driver352.30cpe:2.3:a:nvidia:display_driver:352.30:*:*:*:*:linux:*:*
nvidiadisplay_driver*cpe:2.3:a:nvidia:display_driver:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
nvidia	gpu_driver	*	cpe:2.3:a:nvidia:gpu_driver::::::::
nvidia	display_driver	*	cpe:2.3:a:nvidia:display_driver::::::linux::*
nvidia	display_driver	304.108	cpe:2.3:a:nvidia:display_driver:304.108:::::linux::
nvidia	display_driver	304.119	cpe:2.3:a:nvidia:display_driver:304.119:::::linux::
nvidia	display_driver	304.121	cpe:2.3:a:nvidia:display_driver:304.121:::::linux::
nvidia	display_driver	304.123	cpe:2.3:a:nvidia:display_driver:304.123:::::linux::
nvidia	display_driver	304.125	cpe:2.3:a:nvidia:display_driver:304.125:::::linux::
nvidia	display_driver	352.21	cpe:2.3:a:nvidia:display_driver:352.21:::::linux::
nvidia	display_driver	352.30	cpe:2.3:a:nvidia:display_driver:352.30:::::linux::
nvidia	display_driver	*	cpe:2.3:a:nvidia:display_driver::::::::