CVE-2023-31021: NULL Pointer Dereference

NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager vGPU plugin, where a malicious user in the guest VM can cause a NULL-pointer dereference, which may lead to denial of service...

NVIDIA GPU Display Driver Security Vulnerability

NVIDIA GPU Display Driver is a driver software from NVIDIA Corporation that is used for interactive support of graphics card display modules in operating systems. A security vulnerability exists in NVIDIA GPU Display Driver, which arises from a flaw in the kernel layer that could cause improper...

NVIDIA GPU Display Driver Security Vulnerability

NVIDIA GPU Display Driver is a driver from NVIDIA Corporation that is used to provide interactive support for graphics card display modules in operating systems. A security vulnerability exists in NVIDIA GPU Display Driver, which stems from a vulnerability in the kernel layer, where a null pointe...

NVIDIA vGPU software security vulnerability

NVIDIA vGPU Software is a management software from NVIDIA that is used to provide GPU capabilities to virtual machines. The software supports multiple virtual machines to access the host's GPU, providing graphics performance and application compatibility for virtual machines. A security...

NVIDIA GPU Display Driver Security Vulnerability

NVIDIA GPU Display Driver is a driver from NVIDIA Corporation that is used for interactive support of graphics card display modules in operating systems. A security vulnerability exists in NVIDIA GPU Display Driver that originates from the use of re-parsing to write arbitrary data to a privileged...

NVIDIA vGPU software security vulnerability

NVIDIA vGPU Software is a management software from NVIDIA that is used to provide GPU capabilities to virtual machines. The software supports multiple virtual machines to access the host's GPU, providing graphics performance and application compatibility for virtual machines. A security...

CVE-2023-31023: Untrusted Pointer Dereference

NVIDIA Display Driver for Windows contains a vulnerability where an attacker may cause a pointer dereference of an untrusted value, which may lead to denial of service...

CVE-2023-31018: NULL Pointer Dereference

NVIDIA GPU Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause a NULL-pointer dereference, which may lead to denial of service...

CVE-2023-31020: Improper Access Control

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause improper access control, which may lead to denial of service or data tampering...

CVE-2023-31019: Improper Access Control

NVIDIA GPU Display Driver for Windows contains a vulnerability in wksServicePlugin.dll, where the driver implementation does not restrict or incorrectly restricts access from the named pipe server to a connecting client, which may lead to potential impersonation to the client's secure context...

NVIDIA GPU Display Driver Security Vulnerability

NVIDIA GPU Display Driver is an American NVIDIA driver for interactive support of graphics card display modules in operating systems. A security vulnerability exists in NVIDIA GPU Display Driver that stems from the inclusion of a flaw that could lead to a denial of service by dereferencing a...

NVIDIA GPU Display Driver Security Vulnerability

The NVIDIA GPU Display Driver is a driver from NVIDIA Corporation for interactive support of graphics card display modules in operating systems. A security vulnerability exists in NVIDIA GPU Display Driver that originates from a vulnerability contained in wksServicePlugin.dll, where the driver...

CVE-2023-31016: Uncontrolled Search Path Element

NVIDIA GPU Display Driver for Windows contains a vulnerability where an uncontrolled search path element may allow an attacker to execute arbitrary code, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering...

Ubuntu: Security Advisory (USN-6466-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6466-1: Linux kernel (NVIDIA) vulnerabilities

Hyunwoo Kim discovered that the DVB Core driver in the Linux kernel contained a race condition during device removal, leading to a use-after- free vulnerability. A physically proximate attacker could use this to cause a denial of service system crash or possibly execute arbitrary code...

Ubuntu 22.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-6466-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6466-1 advisory. Hyunwoo Kim discovered that the DVB Core driver in the Linux kernel contained a race condition during device removal, leading to a use-after- free...

Security Bulletin: NVIDIA GPU Display Driver - October 2023

NVIDIA has released a software security update for NVIDIA GPU Display Driver to address the issues that are disclosed in this bulletin. To protect your system, download and install this software update through the NVIDIA Driver Downloads page or, for the vGPU software and Cloud Gaming updates,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: timestamp-authority-fips, aws-efs-csi-driver-fips, kube-oidc-proxy, aactl, dgraph, plutono-fips, spark-operator, prometheus-stackdriver-exporter, kubeflow, kubernetes-csi-livenessprobe-fips, cortex, slsa-verifier, bank-vaults-fips, conftest-fips,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubevela, aactl, buildkitd, kubeflow, src, spark-operator, scorecard, terraform-provider-sendgrid, up, k3d, dgraph, kubescape, cortex, slsa-verifier...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: kube-logging-logging-operator, kubeflow-katib, crossplane-provider-azure, gke-gcloud-auth-plugin, sigstore-scaffolding, flux-helm-controller, flux-kustomize-controller, gitness, dynamic-localpv-provisioner, slsa-verifier, caddy, prometheus-mysqld-exporter,...