Lucene search

K
nvd[email protected]NVD:CVE-2023-0199
HistoryApr 22, 2023 - 3:15 a.m.

CVE-2023-0199

2023-04-2203:15:08
CWE-787
web.nvd.nist.gov
3
nvidia
display driver
windows
linux
vulnerability
kernel mode
denial of service
data tampering

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

AI Score

6.3

Confidence

High

EPSS

0

Percentile

9.0%

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds write can lead to denial of service and data tampering.

Affected configurations

Nvd
Node
nvidiagpu_display_driverRange470470.182.03linux
OR
nvidiagpu_display_driverRange515515.105.01linux
OR
nvidiagpu_display_driverRange525525.105.17linux
OR
nvidiagpu_display_driverRange530530.41.03linux
AND
nvidiageforceMatch-
OR
nvidianvsMatch-
OR
nvidiaquadroMatch-
OR
nvidiartxMatch-
Node
nvidiagpu_display_driverRange450450.236.01linux
AND
nvidiateslaMatch-
Node
nvidiagpu_display_driverRange450454.14windows
AND
nvidiateslaMatch-
Node
nvidiagpu_display_driverRange470474.30windows
OR
nvidiagpu_display_driverRange515518.03windows
AND
nvidianvsMatch-
OR
nvidiaquadroMatch-
OR
nvidiartxMatch-
Node
nvidiagpu_display_driverRange525528.89windows
OR
nvidiagpu_display_driverRange530531.41windows
AND
nvidiastudioMatch-
Node
nvidiagpu_display_driverRange470474.30windows
OR
nvidiagpu_display_driverRange530531.41windows
AND
nvidiageforceMatch-
VendorProductVersionCPE
nvidiagpu_display_driver*cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*
nvidiageforce-cpe:2.3:a:nvidia:geforce:-:*:*:*:*:*:*:*
nvidianvs-cpe:2.3:a:nvidia:nvs:-:*:*:*:*:*:*:*
nvidiaquadro-cpe:2.3:a:nvidia:quadro:-:*:*:*:*:*:*:*
nvidiartx-cpe:2.3:a:nvidia:rtx:-:*:*:*:*:*:*:*
nvidiatesla-cpe:2.3:a:nvidia:tesla:-:*:*:*:*:*:*:*
nvidiagpu_display_driver*cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*
nvidiastudio-cpe:2.3:a:nvidia:studio:-:*:*:*:*:*:*:*

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

AI Score

6.3

Confidence

High

EPSS

0

Percentile

9.0%