Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-34673
HistoryDec 30, 2022 - 12:00 a.m.

CVE-2022-34673

2022-12-3000:00:00
ubuntu.com
ubuntu.com
22
nvidia gpu display driver
linux
vulnerability
out-of-bounds access
denial of service
information disclosure
data tampering

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

EPSS

0

Percentile

13.0%

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel
mode layer (nvidia.ko), where an out-of-bounds array access may lead to
denial of service, information disclosure, or data tampering.

Notes

Author Note
mdeslaur some binary drivers are no longer support by NVidia, so they are marked as ignored here

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

EPSS

0

Percentile

13.0%