PT-2015-6246 · Nvidia · Nvidia Gpu Driver

Published 2015-07-18 · Updated 2019-06-13 · CVE-2015-3625

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NVIDIA GPU driver for FreeBSD versions prior to 352.09 NVIDIA GPU driver for FreeBSD versions prior to 346.72 NVIDIA GPU driver for FreeBSD versions prior to 349.16 NVIDIA GPU driver for FreeBSD versions prior to 343.36 NVIDIA GPU driver for FreeBSD versions prior to 340.76 NVIDIA GPU driver for FreeBSD versions prior to 337.25 NVIDIA GPU driver for FreeBSD versions prior to 334.21 NVIDIA GPU driver for FreeBSD versions prior to 331.113 NVIDIA GPU driver for FreeBSD versions prior to 304.125

Description The issue allows local users with certain permissions to read or write arbitrary kernel memory via unspecified vectors that trigger an untrusted pointer dereference.

Recommendations Update to version 352.09 or later for NVIDIA GPU driver for FreeBSD R352. Update to version 346.72 or later for NVIDIA GPU driver for FreeBSD 346. Update to version 349.16 or later for NVIDIA GPU driver for FreeBSD R349. Update to version 343.36 or later for NVIDIA GPU driver for FreeBSD R343. Update to version 340.76 or later for NVIDIA GPU driver for FreeBSD R340. Update to version 337.25 or later for NVIDIA GPU driver for FreeBSD R337. Update to version 334.21 or later for NVIDIA GPU driver for FreeBSD R334. Update to version 331.113 or later for NVIDIA GPU driver for FreeBSD R331. Update to version 304.125 or later for NVIDIA GPU driver for FreeBSD R304.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-3625

Affected Products

Nvidia Gpu Driver

References · 3

• http://nvidia.custhelp.com/app/answers/detail/a_id/3693 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-3625 · Security Note
• http://securitytracker.com/id/1032981 · Note