PT-2016-5204 · Nvidia · Nvidia Gpu Graphics Driver

Publicado 2016-04-12 · Atualizado 2021-09-09 · CVE-2016-2557

Positive Technologies (AI Summary)

CVSS v3.1

8.4

Alta

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA GPU graphics driver R340 versions prior to 341.95 NVIDIA GPU graphics driver R352 versions prior to 354.74

Description The issue allows local users to obtain sensitive information from kernel memory, cause a denial of service, or possibly gain privileges via unspecified vectors. This is triggered by uninitialized or out-of-bounds memory access in the Escape interface in the Kernel Mode Driver layer.

Recommendations For NVIDIA GPU graphics driver R340 versions prior to 341.95, update to version 341.95 or later. For NVIDIA GPU graphics driver R352 versions prior to 354.74, update to version 354.74 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2016-2557

Produtos afetados

Nvidia Gpu Graphics Driver

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-2557 · Nota de Segurança
• https://support.lenovo.com/us/en/product_security/len_5551 · Nota
• http://nvidia.custhelp.com/app/answers/detail/a_id/4060 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-2557 · Aviso do Fabricante