PT-2015-6246 · Nvidia · Nvidia Gpu Driver

Publicado 2015-07-18 · Atualizado 2019-06-13 · CVE-2015-3625

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NVIDIA GPU driver for FreeBSD versions prior to 352.09 NVIDIA GPU driver for FreeBSD versions prior to 346.72 NVIDIA GPU driver for FreeBSD versions prior to 349.16 NVIDIA GPU driver for FreeBSD versions prior to 343.36 NVIDIA GPU driver for FreeBSD versions prior to 340.76 NVIDIA GPU driver for FreeBSD versions prior to 337.25 NVIDIA GPU driver for FreeBSD versions prior to 334.21 NVIDIA GPU driver for FreeBSD versions prior to 331.113 NVIDIA GPU driver for FreeBSD versions prior to 304.125

Description The issue allows local users with certain permissions to read or write arbitrary kernel memory via unspecified vectors that trigger an untrusted pointer dereference.

Recommendations Update to version 352.09 or later for NVIDIA GPU driver for FreeBSD R352. Update to version 346.72 or later for NVIDIA GPU driver for FreeBSD 346. Update to version 349.16 or later for NVIDIA GPU driver for FreeBSD R349. Update to version 343.36 or later for NVIDIA GPU driver for FreeBSD R343. Update to version 340.76 or later for NVIDIA GPU driver for FreeBSD R340. Update to version 337.25 or later for NVIDIA GPU driver for FreeBSD R337. Update to version 334.21 or later for NVIDIA GPU driver for FreeBSD R334. Update to version 331.113 or later for NVIDIA GPU driver for FreeBSD R331. Update to version 304.125 or later for NVIDIA GPU driver for FreeBSD R304.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-3625

Produtos afetados

Nvidia Gpu Driver

Referências · 3

• http://nvidia.custhelp.com/app/answers/detail/a_id/3693 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-3625 · Nota de Segurança
• http://securitytracker.com/id/1032981 · Nota