CVE-2014-8298 — Nvidia GPU Driver vulnerability

CWE-196 documents6 sources
Severity
7.5HIGHNVD
EPSS
1.5%
top 18.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Nvidia GPU Driver
Timeline
PublishedDec 10
Latest updateMay 17

Description

The NVIDIA Linux Discrete GPU drivers before R304.125, R331.x before R331.113, R340.x before R340.65, R343.x before R343.36, and R346.x before R346.22, Linux for Tegra (L4T) driver before R21.2, and Chrome OS driver before R40 allows remote attackers to cause a denial of service (segmentation fault and X server crash) or possibly execute arbitrary code via a crafted GLX indirect rendering protocol request.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDnvidia/gpu_driverr21.2+10

🔴Vulnerability Details

3
GHSA
GHSA-2ph2-8m3c-5288: The NVIDIA Linux Discrete GPU drivers before R304↗2022-05-17
▶
CVEList
CVE-2014-8298: The NVIDIA Linux Discrete GPU drivers before R304↗2014-12-10
▶
OSV
CVE-2014-8298: The NVIDIA Linux Discrete GPU drivers before R304↗2014-12-10
▶

📋Vendor Advisories

2
Ubuntu
NVIDIA graphics drivers vulnerabilities↗2014-12-10
▶
Debian
CVE-2014-8298: nvidia-graphics-drivers - The NVIDIA Linux Discrete GPU drivers before R304.125, R331.x before R331.113, R...↗2014
▶
CVE-2014-8298 — Nvidia GPU Driver vulnerability | cvebase