PT-2019-10737 · Nvidia+2 · Nouveau Display Driver+2

Published 2019-04-01 · Updated 2023-02-09 · CVE-2018-3979

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Ubuntu versions 18.04 LTS Nouveau Display Driver NV117 version

Description A remote denial-of-service issue exists in the Nouveau Display Driver due to its handling of GPU shader execution. This can be triggered by a specially crafted pixel shader, potentially provided through a malicious website. Once a user visits such a website, no further interaction is required for the issue to occur.

Recommendations For Ubuntu 18.04 LTS, update the Nouveau Display Driver to a version that is not vulnerable to this issue. For Nouveau Display Driver NV117, consider disabling GPU shader execution until a patch is available.

Exploit

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2018-3979

Affected Products

Debian

Nouveau Display Driver

Ubuntu

References · 8

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2018-0647 · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-3979 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-3979 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2018-3979 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-3979 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-3979 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-3979 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-3979 · Vendor Advisory