NVIDIA Virtual GPU Manager Multiple Vulnerabilities (November 2022)

The NVIDIA Virtual GPU Manager software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, including the following: - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular...

NVIDIA GPU Display Driver June 2023 Security Updates

NVIDIA has informed HP of potential security vulnerabilities identified in the NVIDIA® GPU Display Driver for Windows which might allow escalation of privilege, arbitrary code execution, denial of service, or information disclosure. NVIDIA has released updates to mitigate these vulnerabilities...

Cybercriminals Weaponizing Legitimate Advanced Installer Tool in Crypto-Mining Attacks

A legitimate Windows tool used for creating software packages called Advanced Installer is being abused by threat actors to drop cryptocurrency-mining malware on infected machines since at least November 2021. "The attacker uses Advanced Installer to package other legitimate software installers,...

Cybercriminals target graphic designers with GPU miners

Cybercriminals are abusing Advanced Installer, a legitimate Windows tool used for creating software packages, to drop cryptocurrency-mining malware on infected machines. This activity has been ongoing since at least November 2021. The attacker uses Advanced Installer to package other legitimate...

PT-2023-4577 · Arm · Arm 5Th Gen Gpu Architecture Userspace Driver +3

Name of the Vulnerable Software and Affected Versions: Arm Ltd Midgard GPU Userspace Driver versions r0p0 through r32p0 Arm Ltd Bifrost GPU Userspace Driver versions r0p0 through r44p0 Arm Ltd Valhall GPU Userspace Driver versions r19p0 through r44p0 Arm Ltd Arm 5th Gen GPU Architecture Userspace...

VDA 1912 - Black Screen on Session Re-connection with NVidia P1000 GPU

The setup consists of NVIDIA P1000 GPU The initial connection works fine but re-connecting to the session user only sees a black screen The Remote PC setup does not utilize a monitor, however, if a monitor is connected then the issue does not occur...

CVE-2023-22840

Improper neutralization in software for the IntelR oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-22840

Improper neutralization in software for the IntelR oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-22338

Out-of-bounds read in some IntelR oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2023-22338

Out-of-bounds read in some IntelR oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2023-22840

Improper neutralization in software for the IntelR oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-22338

Out-of-bounds read in some IntelR oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2023-22338

CVE-2023-22338 is an out-of-bounds read vulnerability in Intel oneVPL GPU Runtime (and related oneVPL-intel-gpu) prior to version 22.6.5 that could allow an authenticated local user to disclose information. The issue is referenced across Fedora advisories as fixable by updating oneVPL/oneVPL-inte...

CVE-2023-22840

CVE-2023-22840 affects Intel oneVPL GPU runtime/software. The Initial description notes improper neutralization that could enable local denial-of-service for versions before 22.6.5 when authenticated. Connected advisories indicate Fedora updates for oneVPL and oneVPL-intel-gpu (e.g., Fedora 39 pa...

Intel oneVPL GPU Buffer Error Vulnerability

Intel oneVPL GPU is a product of Intel Corporation USA. It is a runtime implementation of the oneVPL API for Intel's generation of GPUs. A security vulnerability exists in IntelR oneVPL GPU versions prior to 22.6.5, which originates from an out-of-bounds read. An attacker could exploit the...

Intel oneVPL GPU Security Vulnerability

Intel oneVPL GPU is a product of Intel Corporation USA. It is a runtime implementation of the oneVPL API for Intel's generation of GPUs. A security vulnerability exists in IntelR oneVPL GPU versions prior to 22.6.5. An attacker could exploit this vulnerability to cause a denial of service on the...

PT-2023-4400 · Intel · Intel Onevpl Gpu

Name of the Vulnerable Software and Affected Versions: Intel oneVPL GPU versions prior to 22.6.5 Description: The issue is related to an out-of-bounds read in the Intel oneVPL GPU software, which can potentially allow an authenticated user to enable information disclosure via local access. This i...

Intel® oneVPL GPU Runtime Advisory

Summary: Potential security vulnerabilities in some Intel® oneVPL GPU Runtime software may allow denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-22338 Description: Out-of-bounds read in some IntelR oneVPL G...

Fedora: Security Advisory for kitty (FEDORA-2023-3746647cc3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6256-1: Linux kernel (IoT) vulnerabilities

Jiasheng Jiang discovered that the HSA Linux kernel driver for AMD Radeon GPU devices did not properly validate memory allocation in certain situations, leading to a null pointer dereference vulnerability. A local attacker could use this to cause a denial of service system crash. CVE-2022-3108...