Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-0075
HistoryMar 27, 2024 - 12:00 a.m.

CVE-2024-0075

2024-03-2700:00:00
ubuntu.com
ubuntu.com
6
nvidia gpu display driver
vulnerability
denial of service
info disclosure

6.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability
where a user may cause a NULL-pointer dereference by accessing passed
parameters the validity of which has not been checked. A successful exploit
of this vulnerability may lead to denial of service and limited information
disclosure.

Notes

Author Note
mdeslaur some binary drivers are no longer support by NVidia, so they are marked as ignored here

6.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%