CVE-2017-0350

All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used in an offset calculation may lead to denial of service or potential escalation of privileges...

CVE-2017-0348

CVE-2017-0348 affects the NVIDIA Windows GPU Display Driver. The vulnerability is a NULL pointer dereference in the kernel-mode handler nvlddmkm.sys, which may cause denial of service or potentially escalate privileges. Affected product: NVIDIA Windows GPU Display Driver (kernel-mode layer). Root...

CVE-2017-0351

All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges...

CVE-2017-0350

CVE-2017-0350 affects NVIDIA GPU Display Driver. A vulnerability in the kernel mode layer handler arises from improper validation of user-supplied values used in offset calculations, potentially enabling denial of service or privilege escalation. In affected Linux drivers, versions 375.x prior to...

CVE-2017-0354

All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgkDdiEscape where a call to certain function requiring lower IRQL can be made under raised IRQL which may lead to a denial of service...

CVE-2017-0347

All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where a value passed from a user to the driver is not correctly validated and used as the index to an array, which may lead to denial of service or potenti...

CVE-2017-0355

Summary: CVE-2017-0355 affects NVIDIA Windows GPU Display Driver. The vulnerability exists in the kernel mode layer handler for DxgkDdiEscape, where the driver may access paged memory while holding a spinlock, enabling a potential denial-of-service condition. This is part of a family of related f...

CVE-2017-0343

CVE-2017-0343 affects the NVIDIA Windows GPU Display Driver (kernel mode layer nvlddmkm.sys). The connected sources confirm a race condition due to lack of synchronization in the nvlddmkm.sys handler, which can lead to denial of service or potential privilege escalation. Affected component is the...

CVE-2017-0354

The NVIDIA Windows GPU Display Driver (nvlddmkm.sys) kernel-mode handler for DxgkDdiEscape is vulnerable to an issue where a function requiring a lower IRQL can be invoked while IRQL is raised, enabling denial of service and potential privilege escalation. Public details from connected sources in...

Qemu: VNC: memory corruption due to unchecked resolution limit

An out-of-bounds memory access issue was found in Quick Emulator QEMU in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vncrefreshserversurface'. A user inside a guest could use this flaw to crash the QEMU process...

Qemu: VNC: memory corruption due to unchecked resolution limit

An out-of-bounds memory access issue was found in Quick Emulator QEMU in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vncrefreshserversurface'. A user inside a guest could use this flaw to crash the QEMU process...

Important: Red Hat Security Advisory: qemu-kvm-rhev security update

An update for qemu-kvm-rhev is now available for RHEV 3.X Hypervisor and Agents for RHEL-6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2017-0351

All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges...

Security Bulletin: NVIDIA GPU Display driver contains multiple vulnerabilities in the kernel mode layer handler

Vulnerability Details The following sections summarize the vulnerabilities and lists their CVSS risk assessments. CVE-2017-0341 NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape, where user provided input can trigger an acces...

CVE-2017-0350

All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used in an offset calculation may lead to denial of service or potential escalation of privileges...

CVE-2017-0352

All versions of the NVIDIA GPU Display Driver contain a vulnerability in the GPU firmware where incorrect access control may allow CPU access sensitive GPU control registers, leading to an escalation of privileges...

EulerOS 2.0 SP1 : qemu-kvm (EulerOS-SA-2017-1079)

According to the version of the qemu-kvm package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support the issue could occur when a VNC client...

NVIDIA Linux GPU Display Driver contains missing permissions check and improper validation vulnerabilities - us

Lenovo Security Advisory: LEN-10962 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-7382, CVE-2016-7389 Summary Description: The NVIDIA GPU Display Driver for Linux contains two privilege escalation vulnerabilities. CVE-2016-7382...

NVIDIA Linux GPU Display Driver contains missing permissions check and improper validation vulnerabilities - Lenovo Support US

No description provided...

RHEL 7 : qemu-kvm (RHSA-2017:0987)

An update for qemu-kvm is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...