PT-2017-10515

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgkDdiEscapeID 0x100008b, where user-provided input is used as the limit for a loop,...

PT-2017-10522

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to improper handling of values in the kernel mode layer handler, which may cause a denial of service on the system. Recommendations At the momen...

CVE-2017-0323: NULL Pointer Dereference

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges...

CVE-2017-0318: Improper Input Validation

All versions of NVIDIA Linux GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper validation of an input parameter may cause a denial of service on the system...

CVE-2017-0320: Undefined Security Weakness

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper handling of values may cause a denial of service on the system...

CVE-2017-0319: Undefined Security Weakness

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper handling of values may cause a denial of service on the system...

PT-2017-10514

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver version R378 Description The issue is related to improper access control in the kernel mode layer handler, which may lead to denial of service or possible escalation of privileges. Recommendations For NVIDIA GPU Displ...

PT-2017-10525

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler of the NVIDIA Windows GPU Display Driver, specifically in the nvlddmkm.sys file. A value...

PT-2017-10523

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to improper handling of values in the kernel mode layer handler, which may cause a denial of service on the system. Recommendations At the momen...

PT-2017-10518

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgkDdiEscape, where an attempt to access an invalid object pointer may lead to denial o...

UBUNTU-CVE-2017-0318

All versions of NVIDIA Linux GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper validation of an input parameter may cause a denial of service on the system...

PT-2017-10521

Name of the Vulnerable Software and Affected Versions NVIDIA Linux GPU Display Driver affected versions not specified Description The issue is related to improper validation of an input parameter in the kernel mode layer handler, which may cause a denial of service on the system. Recommendations ...

PT-2017-10524

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver affected versions not specified Description The issue is related to a NULL pointer dereference caused by invalid user input in the kernel mode layer handler, which may lead to denial of service or potential escalation...

PT-2017-10512

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver affected versions not specified Description The issue is related to integer overflows in the kernel mode layer handler, which may cause improper memory allocation. This can lead to a denial of service or potential...

CVE-2017-0310: Improper Privilege Management

All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper access controls allowing unprivileged user to cause a denial of service...

CVE-2017-0321: NULL Pointer Dereference

All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges...

CVE-2017-0309: Integer Overflow or Wraparound

All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where multiple integer overflows may cause improper memory allocation leading to a denial of service or potential escalation of privileges...

NVIDIA Driver 375.70 - Buffer Overflow in Command Buffer Submission

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1012 DxgkDdiSubmitCommandVirtual is the function implemented by the kernel mode driver responsible for submitting a command buffer to the GPU. One of the arguments passed contains vendor specific data from the user mode driver. The...

Attacking the Windows NVIDIA Driver

Posted by Oliver Chang Modern graphic drivers are complicated and provide a large promising attack surface for EoPs and sandbox escapes from processes that have access to the GPU e.g. the Chrome GPU process. In this blog post we’ll take a look at attacking the NVIDIA kernel mode Windows drivers,...

Security Bulletin: NVIDIA GPU Display Driver contains multiple vulnerabilities in the kernel mode layer handler

Vulnerability Details The following sections summarize the vulnerabilities and list their CVSS risk assessments. CVE-2017-0308 NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where untrusted input used for buffer size...