Security Bulletin: NVIDIA Jetson TX1 and TX2 L4T - April 2019

NVIDIA has released software security updates for NVIDIA® Jetson™ TX1 and TX2 in the NVIDIA® Tegra® Linux Driver Package L4T. The update addresses issues that may lead to code execution, denial of service, escalation of privileges, or information disclosure. To protect your system, download...

Design/Logic Flaw

A remote denial-of-service vulnerability exists in the way the Nouveau Display Driver the default Ubuntu Nvidia display driver handles GPU shader execution. A specially crafted pixel shader can cause remote denial-of-service issues. An attacker can provide a specially crafted website to trigger...

CVE-2018-3979

A remote denial-of-service vulnerability exists in the way the Nouveau Display Driver the default Ubuntu Nvidia display driver handles GPU shader execution. A specially crafted pixel shader can cause remote denial-of-service issues. An attacker can provide a specially crafted website to trigger...

CVE-2018-3979

The CVE-2018-3979 vulnerability affects the Nouveau Display Driver on Ubuntu 18.04 LTS (Linux kernel 4.15.0-29-generic, x86_64; NV117) where GPU shader execution can be abused by a specially crafted pixel shader to trigger a remote denial-of-service. The attack is remotely triggerable by visiting...

CVE-2018-3979

A remote denial-of-service vulnerability exists in the way the Nouveau Display Driver the default Ubuntu Nvidia display driver handles GPU shader execution. A specially crafted pixel shader can cause remote denial-of-service issues. An attacker can provide a specially crafted website to trigger...

Hardcoded credentials

NVIDIA GeForce Experience before 3.18 contains a vulnerability when ShadowPlay or GameStream is enabled. When an attacker has access to the system and creates a hard link, the software does not check for hard link attacks. This behavior may lead to code execution, denial of service, or escalation...

CVE-2019-5674

NVIDIA GeForce Experience before 3.18 contains a vulnerability when ShadowPlay or GameStream is enabled. When an attacker has access to the system and creates a hard link, the software does not check for hard link attacks. This behavior may lead to code execution, denial of service, or escalation...

CVE-2019-5674

NVIDIA GeForce Experience before 3.18 contains a vulnerability when ShadowPlay or GameStream is enabled. When an attacker has access to the system and creates a hard link, the software does not check for hard link attacks. This behavior may lead to code execution, denial of service, or escalation...

CVE-2019-5674

NVIDIA GeForce Experience prior to version 3.18 is vulnerable to a local privilege/remote code execution style issue where an attacker with system access can abuse a hard link write scenario (ShadowPlay/GameStream enabled) to potentially execute code, cause a denial of service, or escalate privil...

Gamers Beware: Nvidia Fixes High-Severity GeForce Experience Bug

Nvidia, a maker of gaming-friendly graphics processing units GPU, has patched a high-severity vulnerability in its GeForce Experience software, which could lead to code execution or denial-of-service of products if exploited. The vulnerability CVE‑2019‑5674 has a CVSS score of 8.8, making it high...

NVIDIA Arbitrary File Writes to Command ExecutionCVE-2019-5674

The post NVIDIA Arbitrary File Writes to Command Execution CVE-2019-5674 appeared first on Rhino Security Labs...

openSUSE Security Update : singularity (openSUSE-2019-811)

Singularity was updated to version 2.6.0, bringing features, bugfixes and security fixes. Security issues fixed : - CVE-2018-12021: Fixed access control on systems supporting overlay file system boo1100333. Highlights of 2.6.0 : - Allow admin to specify a non-standard location for mksquashfs bina...

Amazon Linux AMI : nvidia (ALAS-2019-1182)

NVIDIA graphics driver contains a vulnerability that may allow access to application data processed on the GPU through a side channel exposed by the GPU performance counters. Local user access is required. This is not a network or remote attack vector. CVE-2018-6260 C Tenable Network Security, In...

Security Bulletin: NVIDIA GeForce Experience – March 2019

NVIDIA has released a software security update for NVIDIA® GeForce Experience™. This update addresses an issue that may lead to code execution, denial of service, or escalation of privileges. To protect your system, download and install this software update through the GeForce Experience Download...

Nouveau Display Driver Remote Denial of Service

Summary A remote denial-of-service vulnerability exists in the way the Nouveau display driver the default Ubuntu Nvidia display driver handles GPU shader execution. A specially crafted pixel shader can cause remote denial-of-service issues. An attacker can provide a specially crafted website to...

OPENSUSE-SU-2019:0310-1 Security update for gdm

This update for gdm fixes the following issues: Security issue fixed: - CVE-2019-3825: Fixed a lock screen bypass when timed login was enabled bsc1124628. Other issues fixed: - GLX applications do not work well when the proprietary nvidia driver is used with a wayland session. Because of that thi...

HPSBHF03611 rev. 2 - NVIDIA GPU Display Driver Vulnerabilities

Potential Security Impact Denial of service, Escalation of privilege, Unauthorized code execution, or Information disclosure Source: HP, HP Product Security Response Team PSRT Reported By: NVIDIA VULNERABILITY SUMMARY HP has been notified of potential security vulnerabilities with the GPU Display...

Low: nvidia

Issue Overview: NVIDIA graphics driver contains a vulnerability that may allow access to application data processed on the GPU through a side channel exposed by the GPU performance counters. Local user access is required. This is not a network or remote attack vector. CVE-2018-6260 Affected...

openSUSE Security Update : gdm (openSUSE-2019-310)

This update for gdm fixes the following issues : Security issue fixed : - CVE-2019-3825: Fixed a lock screen bypass when timed login was enabled bsc1124628. Other issues fixed : - GLX applications do not work well when the proprietary nvidia driver is used with a wayland session. Because of that...

NVIDIA graphics driver information disclosure vulnerability

NVIDIA graphics driver is a graphics driver from the American company NVIDIA. An information disclosure vulnerability exists in NVIDIA graphics driver. An attacker could exploit this vulnerability to obtain sensitive information about an affected component...