NVIDIA Linux GPU Display Driver contains missing permissions check and improper validation vulnerabilities - us

Lenovo Security Advisory: LEN-10962 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-7382, CVE-2016-7389 Summary Description: The NVIDIA GPU Display Driver for Linux contains two privilege escalation vulnerabilities. CVE-2016-7382...

FreeBSD : NVIDIA UNIX driver -- multiple vulnerabilities in the kernel mode layer handler (057e6616-1885-11e7-bb4d-a0d3c19bfa21)

NVIDIA Unix security team reports : NVIDIA GPU Display Driver contains vulnerabilities in the kernel mode layer handler where multiple integer overflows, improper access control, and improper validation of a user input may cause a denial of service or potential escalation of privileges...

NVIDIA Windows GPU Display Driver Null Pointer Reference Denial of Service Vulnerability (CNVD-2017-01867)

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A null pointer reference denial of service vulnerability exists in NVIDIA GPU Display Driver. An attacker could use this vulnerability to cause a denial of service or gain elevated...

NVIDIA Windows GPU Display Driver Local Denial of Service Vulnerability (CNVD-2017-01863)

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A security vulnerability exists in the kernel mode layer handler in the NVIDIA Windows GPU Display Driver, which arises from the program failing to properly handle values. An attack...

NVIDIA Windows GPU Display Driver Null Pointer Reference Denial of Service Vulnerability

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A security vulnerability exists in the NVIDIA Windows GPU Display Driver's nvlddmkm.sys processing DxgkDdiEscape, which can be exploited by attackers to cause a denial of service or...

DEBIAN-CVE-2017-0318

All versions of NVIDIA Linux GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper validation of an input parameter may cause a denial of service on the system...

CVE-2017-0310

All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper access controls allowing unprivileged user to cause a denial of service...

UBUNTU-CVE-2017-0309

All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where multiple integer overflows may cause improper memory allocation leading to a denial of service or potential escalation of privileges...

CVE-2017-0322

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler where a value passed from a user to the driver is not correctly validated and used as the index to an array, leading to denial of service or potential escalation of privileges...

CVE-2017-0314

CVE-2017-0314 affects the NVIDIA Windows GPU Display Driver (nvlddmkm.sys) in the kernel-mode layer for the SubmitCommandVirtual DDI. Untrusted input can reference memory outside the intended buffer boundary, leading to denial of service or elevation of privileges . The description indicates the ...

PT-2017-10521

Name of the Vulnerable Software and Affected Versions NVIDIA Linux GPU Display Driver affected versions not specified Description The issue is related to improper validation of an input parameter in the kernel mode layer handler, which may cause a denial of service on the system. Recommendations ...

CVE-2017-0322: Improper Validation of Array Index

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler where a value passed from a user to the driver is not correctly validated and used as the index to an array, leading to denial of service or potential escalation of privileges...

CVE-2017-0324: Improper Restriction of Operations within the Bounds of a Memory Buffer

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where the size of an input buffer is not validated, leading to denial of service or potential escalation of privileges...

CVE-2017-0323: NULL Pointer Dereference

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges...

CVE-2017-0321: NULL Pointer Dereference

All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges...

CVE-2017-0320: Undefined Security Weakness

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper handling of values may cause a denial of service on the system...

CVE-2017-0319: Undefined Security Weakness

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper handling of values may cause a denial of service on the system...

CVE-2017-0318: Improper Input Validation

All versions of NVIDIA Linux GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper validation of an input parameter may cause a denial of service on the system...

CVE-2017-0315: NULL Pointer Dereference

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where an attempt to access an invalid object pointer may lead to denial of service or potential escalation of privileges...

CVE-2017-0314: Improper Restriction of Operations within the Bounds of a Memory Buffer

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys implementation of the SubmitCommandVirtual DDI DxgkDdiSubmitCommandVirtual where untrusted input is used to reference memory outside of the intended boundary of the buffer leading to...