Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-31616
HistoryNov 19, 2022 - 12:00 a.m.

CVE-2022-31616

2022-11-1900:00:00
ubuntu.com
ubuntu.com
21
nvidia gpu
windows
driver
vulnerability
kernel mode
local user
denial of service
information disclosure

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

EPSS

0

Percentile

5.1%

NVIDIA GPU Display Driver for Windows contains a vulnerability in the
kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a local
user with basic capabilities can cause an out-of-bounds read, which may
lead to denial of service, or information disclosure.

Notes

Author Note
sbeattie windows drivers only
mdeslaur some binary drivers are no longer support by NVidia, so they are marked as ignored here
OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchnvidia-graphics-drivers-384< anyUNKNOWN

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

EPSS

0

Percentile

5.1%

Related for UB:CVE-2022-31616