Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-0074
HistoryMar 27, 2024 - 12:00 a.m.

CVE-2024-0074

2024-03-2700:00:00
ubuntu.com
ubuntu.com
11
nvidia
gpu
display driver
linux
vulnerability
cve-2024-0074
memory location
buffer
exploit
denial of service
data tampering

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

25.9%

NVIDIA GPU Display Driver for Linux contains a vulnerability where an
attacker may access a memory location after the end of the buffer. A
successful exploit of this vulnerability may lead to denial of service and
data tampering.

Notes

Author Note
mdeslaur some binary drivers are no longer support by NVidia, so they are marked as ignored here

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

25.9%