CVE-2017-6266

CVE-2017-6266 affects the NVIDIA GPU Display Driver’s kernel mode layer handler, where improper access controls could allow unprivileged users to cause a denial of service. Connected advisories note related CVEs (6267, 6272) and indicate upstream fixes; for example, Arch Linux ASA-201709-22 fixes...

CVE-2017-6270: Divide By Zero

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiCreateAllocation where untrusted user input is used as a divisor without validation during a calculation which may lead to a potential divide by zero and denial of service...

PT-2017-16965

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver affected versions not specified Description The issue is related to improper access controls in the kernel mode layer handler, which could allow unprivileged users to cause a denial of service. Recommendations At the...

PT-2017-16967

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgkDdiEscape, where a value passed from a user to the driver is not correctly validated...

PT-2017-16969

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue arises from a vulnerability in the kernel mode layer handler for DxgkDdiCreateAllocation, where untrusted user input is used as a divisor without validatio...

CVE-2017-6271: Divide By Zero

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiCreateAllocation where untrusted user input is used as a divisor without validation while processing block linear information which may lead to a potential divide by zero and denial of service...

CVE-2017-6272

NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to a denial of service or possible escalation of privileges...

CVE-2017-6272: Improper Input Validation

NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to a denial of service or possible escalation of privileges...

PT-2017-16975

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgkDdiEscape, where a value passed from a user to the driver is not correctly validated...

PT-2017-16968

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgkDdiEscape, where a pointer passed from a user to the driver is used without...

UBUNTU-CVE-2017-6272

NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to a denial of service or possible escalation of privileges...

PT-2017-16971

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler of the NVIDIA GPU Display Driver. A value passed from a user to the driver is not correctly validate...

CVE-2017-6267: Improper Initialization

NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where an incorrect initialization of internal objects can cause an infinite loop which may lead to a denial of service...

CVE-2017-6267

NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where an incorrect initialization of internal objects can cause an infinite loop which may lead to a denial of service...

UBUNTU-CVE-2017-6266

NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where improper access controls could allow unprivileged users to cause a denial of service...

CVE-2017-6266

NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where improper access controls could allow unprivileged users to cause a denial of service...

CVE-2017-6266: Undefined Security Weakness

NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where improper access controls could allow unprivileged users to cause a denial of service...

PT-2017-16966

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver affected versions not specified Description The issue is related to an incorrect initialization of internal objects in the kernel mode layer handler, which can cause an infinite loop. This may lead to a denial of...

Security Bulletin: NVIDIA GPU contains multiple vulnerabilities in the kernel mode layer handler

Vulnerability Details The following sections summarize the vulnerabilities. Descriptions use CWE™ and risk assessments follow CVSS. CVE-2017-6269 NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where a pointer passed from ...

Microsoft Windows Kernel - nt!NtSetIoCompletion nt!NtRemoveIoCompletion Pool Memory Disclosure

Microsoft Windows Kernel - nt!NtSetIoCompletion nt!NtRemoveIoCompletion Pool Memory Disclosure / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1269 We have discovered that the nt!NtRemoveIoCompletion system call handler discloses 4 bytes of uninitialized pool memory to user-mo...