Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-4689-1
HistoryJan 11, 2021 - 12:00 a.m.

NVIDIA graphics drivers vulnerabilities

2021-01-1100:00:00
ubuntu.com
94

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.6 Medium

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

11.7%

JSON

Releases

  • Ubuntu 20.10
  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM

Packages

  • nvidia-graphics-drivers-390 - NVIDIA binary X.Org driver
  • nvidia-graphics-drivers-450 - NVIDIA binary X.Org driver
  • nvidia-graphics-drivers-460 - NVIDIA binary X.Org driver

Details

It was discovered that the NVIDIA GPU display driver for the Linux kernel
contained a vulnerability that allowed user-mode clients to access legacy
privileged APIs. A local attacker could use this to cause a denial of
service or escalate privileges. (CVE-2021-1052)

It was discovered that the NVIDIA GPU display driver for the Linux kernel
did not properly validate a pointer received from userspace in some
situations. A local attacker could use this to cause a denial of service.
(CVE-2021-1053)

Xinyuan Lyu discovered that the NVIDIA GPU display driver for the Linux
kernel did not properly restrict device-level GPU isolation. A local
attacker could use this to cause a denial of service or possibly expose
sensitive information. (CVE-2021-1056)

OSVersionArchitecturePackageVersionFilename
Ubuntu20.10noarchxserver-xorg-video-nvidia-390< 390.141-0ubuntu0.20.10.1UNKNOWN
Ubuntu20.10noarchlibcuda1-384< 390.141-0ubuntu0.20.10.1UNKNOWN
Ubuntu20.10noarchlibnvidia-cfg1-390< 390.141-0ubuntu0.20.10.1UNKNOWN
Ubuntu20.10noarchlibnvidia-common-390< 390.141-0ubuntu0.20.10.1UNKNOWN
Ubuntu20.10noarchlibnvidia-compute-390< 390.141-0ubuntu0.20.10.1UNKNOWN
Ubuntu20.10noarchlibnvidia-decode-390< 390.141-0ubuntu0.20.10.1UNKNOWN
Ubuntu20.10noarchlibnvidia-encode-390< 390.141-0ubuntu0.20.10.1UNKNOWN
Ubuntu20.10noarchlibnvidia-fbc1-390< 390.141-0ubuntu0.20.10.1UNKNOWN
Ubuntu20.10noarchlibnvidia-gl-390< 390.141-0ubuntu0.20.10.1UNKNOWN
Ubuntu20.10noarchlibnvidia-ifr1-390< 390.141-0ubuntu0.20.10.1UNKNOWN
Rows per page:
1-10 of 2821

Related

threatpost 2
osv 5
archlinux 1
openvas 7
nessus 9
ubuntucve 3
ubuntu 3
prion 3
hp 1
debiancve 3
githubexploit 1
cve 3
nvidia 1
debian 1
lenovo 1
gentoo 1
threatpost
threatpost
NVIDIA Gamers Face DoS, Data Loss from Shield TV Bugs
2021-01-20 20:45:43
Nvidia Squashes High-Severity Jetson DoS Flaw
2021-01-26 22:11:54
osv
osv
linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-4.15, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-hwe-5.4, linux-hwe-5.8, linux-oem-5.6, linux-oracle, linux-oracle-5.4 vulnerabilities
2021-01-11 21:57:16
nvidia-graphics-drivers-418-server, nvidia-graphics-drivers-450-server vulnerabilities
2021-01-20 13:13:38
linux, linux-aws, linux-azure, linux-gcp, linux-hwe-5.4, linux-hwe-5.8, linux-oracle update
2021-01-21 02:34:07
archlinux
archlinux
[ASA-202101-19] nvidia-utils: multiple issues
2021-01-12 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2021-0029)
2022-01-28 00:00:00
Ubuntu: Security Advisory (USN-4689-2)
2021-01-12 00:00:00
Ubuntu: Security Advisory (USN-4689-3)
2021-01-21 00:00:00
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-4689-2)
2021-01-12 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : NVIDIA graphics drivers vulnerabilities (USN-4689-1)
2021-01-13 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel update (USN-4689-4)
2021-01-21 00:00:00
ubuntucve
ubuntucve
CVE-2021-1056
2021-01-07 00:00:00
CVE-2021-1053
2021-01-07 00:00:00
CVE-2021-1052
2021-01-07 00:00:00
ubuntu
ubuntu
Linux kernel update
2021-01-21 00:00:00
Linux kernel vulnerabilities
2021-01-11 00:00:00
NVIDIA graphics drivers vulnerabilities
2021-01-20 00:00:00
prion
prion
Input validation
2021-01-08 01:15:00
Information disclosure
2021-01-08 01:15:00
Information disclosure
2021-01-08 01:15:00
hp
hp
HPSBHF03710 rev. 6 - NVIDIA GPU Display Driver January 2021 Security Updates
2021-01-07 00:00:00
debiancve
debiancve
CVE-2021-1052
2021-01-08 01:15:00
CVE-2021-1056
2021-01-08 01:15:00
CVE-2021-1053
2021-01-08 01:15:00
githubexploit
githubexploit
Exploit for Incorrect Default Permissions in Nvidia Gpu Driver
2021-01-08 11:29:48
cve
cve
CVE-2021-1052
2021-01-08 01:15:00
CVE-2021-1053
2021-01-08 01:15:00
CVE-2021-1056
2021-01-08 01:15:00
nvidia
nvidia
Security Bulletin: NVIDIA GPU Display Driver - January 2021
2021-01-07 00:00:00
debian
debian
[SECURITY] [DLA 2888-1] nvidia-graphics-drivers security update
2022-01-18 20:42:16
lenovo
lenovo
NVIDIA GPU Display Driver - January 2021 Security Bulletin - Lenovo Support NL
2021-01-12 14:22:25
gentoo
gentoo
NVIDIA Drivers: Multiple Vulnerabilities
2023-10-03 00:00:00

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.6 Medium

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

11.7%

JSON
Related for USN-4689-1
threatpost2osv5archlinux1openvas7nessus9ubuntucve3ubuntu3prion3hp1debiancve3githubexploit1cve3nvidia1debian1lenovo1gentoo1