PT-2020-5801 · Nvidia+2 · Nvidia Windows Gpu Display Driver+2

Thomas E. Carroll · Published 2020-06-24 · Updated 2021-07-21 · CVE-2020-5963

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: NVIDIA Windows GPU Display Driver, all versions

Description: The issue is related to improper access control in the Inter Process Communication APIs of the NVIDIA Windows GPU Display Driver. This may lead to code execution, denial of service, or information disclosure. The vulnerability is also associated with insecure privilege management, which could allow an attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations: For all versions, consider restricting access to the Inter Process Communication APIs as a temporary workaround until a patch is available. Additionally, review and adjust privilege management settings to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2021-01764

CVE-2020-5963

USN-4404-1

USN-4404-2

Affected Products

Linuxmint

Nvidia Windows Gpu Display Driver

Ubuntu

References · 18

• https://osv.dev/vulnerability/DEBIAN-CVE-2020-5963 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-5967 · Vendor Advisory
• https://usn.ubuntu.com/4404-1 · Vendor Advisory
• https://nvidia.custhelp.com/app/answers/detail/a_id/5031 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-5963 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-5963 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4404-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5963 · Security Note
• https://osv.dev/vulnerability/USN-4404-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4404-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-5963 · Security Note
• https://bdu.fstec.ru/vul/2021-01764 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2020-5963 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4404-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-5973 · Vendor Advisory