CVE-2023-31021: NULL Pointer Dereference

NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager vGPU plugin, where a malicious user in the guest VM can cause a NULL-pointer dereference, which may lead to denial of service...

NVIDIA GPU Display Driver Security Vulnerability

NVIDIA GPU Display Driver is an American NVIDIA driver for interactive support of graphics card display modules in operating systems. A security vulnerability exists in NVIDIA GPU Display Driver that stems from the inclusion of a flaw that could lead to a denial of service by dereferencing a...

CVE-2023-31019: Improper Access Control

NVIDIA GPU Display Driver for Windows contains a vulnerability in wksServicePlugin.dll, where the driver implementation does not restrict or incorrectly restricts access from the named pipe server to a connecting client, which may lead to potential impersonation to the client's secure context...

CVE-2023-31023: Untrusted Pointer Dereference

NVIDIA Display Driver for Windows contains a vulnerability where an attacker may cause a pointer dereference of an untrusted value, which may lead to denial of service...

CVE-2023-31020: Improper Access Control

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause improper access control, which may lead to denial of service or data tampering...

CVE-2023-31018: NULL Pointer Dereference

NVIDIA GPU Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause a NULL-pointer dereference, which may lead to denial of service...

NVIDIA GPU Display Driver Security Vulnerability

The NVIDIA GPU Display Driver is a driver from NVIDIA Corporation for interactive support of graphics card display modules in operating systems. A security vulnerability exists in NVIDIA GPU Display Driver that originates from a vulnerability contained in wksServicePlugin.dll, where the driver...

CVE-2023-31016: Uncontrolled Search Path Element

NVIDIA GPU Display Driver for Windows contains a vulnerability where an uncontrolled search path element may allow an attacker to execute arbitrary code, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering...

Ubuntu: Security Advisory (USN-6466-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6466-1: Linux kernel (NVIDIA) vulnerabilities

Hyunwoo Kim discovered that the DVB Core driver in the Linux kernel contained a race condition during device removal, leading to a use-after- free vulnerability. A physically proximate attacker could use this to cause a denial of service system crash or possibly execute arbitrary code...

Ubuntu 22.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-6466-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6466-1 advisory. Hyunwoo Kim discovered that the DVB Core driver in the Linux kernel contained a race condition during device removal, leading to a use-after- free...

Security Bulletin: NVIDIA GPU Display Driver - October 2023

NVIDIA has released a software security update for NVIDIA GPU Display Driver to address the issues that are disclosed in this bulletin. To protect your system, download and install this software update through the NVIDIA Driver Downloads page or, for the vGPU software and Cloud Gaming updates,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kube-oidc-proxy, kubevela, spark-operator, kiam, smarter-device-manager-fips, kubeflow-fips, metrics-server-fips, prometheus-blackbox-exporter, kubernetes-csi-livenessprobe-fips, aws-efs-csi-driver-fips, bank-vaults-fips, kubescape, conftest-fips,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: slsa-verifier, kubeflow, kubevela, spark-operator, kubescape, buildkitd, scorecard, cortex, up, terraform-provider-sendgrid, src, aactl, k3d, dgraph...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: kiam, tekton-chains, prometheus-alertmanager, trust-manager, skaffold, flux, flux-helm-controller, fuse-overlayfs-snapshotter, prometheus-elasticsearch-exporter, gitness, aws-efs-csi-driver, ollama, zot, bank-vaults, prometheus-adapter, thanos-operator,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: git-lfs, pulumi-language-java, hey, nghttp2, stakater-reloader, kubernetes-csi-livenessprobe, hugo, atlantis, ip-masq-agent, spark-operator, src, nri-prometheus, weaviate, kubevela, oauth2-proxy, kubewatch, nginx-stable, kaf, terraform-provider-azurerm, mc,...

NVIDIA Drivers: Multiple Vulnerabilities

Background NVIDIA Drivers are NVIDIA's accelerated graphics driver. Description Multiple vulnerabilities have been discovered in NVIDIA Drivers. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no...

The vulnerability of NVIDIA GPU software driver allows a hacker to trigger a service failure or enhance their privileges.

The vulnerability of NVIDIA GPU graphics driver involves the use of an unreliable pointer. Exploiting this vulnerability can allow attackers to cause system failures or gain increased privileges...

GLSA-202310-02 : NVIDIA Drivers: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202310-02 NVIDIA Drivers: Multiple Vulnerabilities - NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape or IOCTL in which user-mo...

The vulnerability of the Host KVM Daemon of the BMC – the Baseboard Management Controller – in NVIDIA DGX H100 BMC allows a hacker to execute arbitrary code, cause system failures, or gain increased privileges.

The vulnerability of the NVIDIA DGX H100 BMC’s KVM daemon controller for equipment management involves an escape from the buffer boundaries into memory. Exploiting this vulnerability allows a attacker to execute arbitrary code, cause system failures, or gain increased privileges...