Lucene search

K
ubuntucveUbuntu.comUB:CVE-2016-2557
HistoryApr 12, 2016 - 12:00 a.m.

CVE-2016-2557

2016-04-1200:00:00
ubuntu.com
ubuntu.com
7

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

32.2%

The Escape interface in the Kernel Mode Driver layer in the NVIDIA GPU
graphics driver R340 before 341.95 and R352 before 354.74 on Windows allows
local users to obtain sensitive information from kernel memory, cause a
denial of service (crash), or possibly gain privileges via unspecified
vectors, which trigger uninitialized or out-of-bounds memory access.

Notes

Author Note
tyhicks Only affects Windows

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

32.2%

Related for UB:CVE-2016-2557