CVE-2015-5053

CWE-284 — Improper Access Control5 documents5 sources
Severity
10.0CRITICAL
EPSS
0.5%
top 33.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Nvidia GPU Driver
Timeline
PublishedNov 24
Latest updateMay 17

Description

The host memory mapping path feature in the NVIDIA GPU graphics driver R346 before 346.87 and R352 before 352.41 for Linux and R352 before 352.46 for GRID vGPU and vSGA does not properly restrict access to third-party device IO memory, which allows attackers to gain privileges, cause a denial of service (resource consumption), or possibly have unspecified other impact via unknown vectors related to the follow_pfn kernel-mode API call.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages2 packages

▶Debiannvidia-graphics-drivers< 352.41-1+3
▶NVDnvidia/gpu_driver11 versions+10

🔴Vulnerability Details

3
GHSA
GHSA-54q6-gvgx-frm8: The host memory mapping path feature in the NVIDIA GPU graphics driver R346 before 346↗2022-05-17
▶
CVEList
CVE-2015-5053: The host memory mapping path feature in the NVIDIA GPU graphics driver R346 before 346↗2015-11-24
▶
OSV
CVE-2015-5053: The host memory mapping path feature in the NVIDIA GPU graphics driver R346 before 346↗2015-11-24
▶

📋Vendor Advisories

1
Debian
CVE-2015-5053: nvidia-graphics-drivers - The host memory mapping path feature in the NVIDIA GPU graphics driver R346 befo...↗2015
▶
CVE-2015-5053 (CRITICAL CVSS 10) | The host memory mapping path featur | cvebase.io