Lucene search

K
nvd[email protected]NVD:CVE-2023-31020
HistoryNov 02, 2023 - 7:15 p.m.

CVE-2023-31020

2023-11-0219:15:41
CWE-284
web.nvd.nist.gov
5
nvidia
display driver
windows
kernel mode
vulnerability
access control
denial of service
data tampering

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

AI Score

6.7

Confidence

High

EPSS

0

Percentile

9.0%

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause improper access control, which may lead to denial of service or data tampering.

Affected configurations

Nvd
Node
nvidiavirtual_gpuRange<13.9
OR
nvidiavirtual_gpuRange14.015.4
OR
nvidiavirtual_gpuRange16.016.2
AND
microsoftwindowsMatch-
VendorProductVersionCPE
nvidiavirtual_gpu*cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

AI Score

6.7

Confidence

High

EPSS

0

Percentile

9.0%