CVE-2016-7382
published 2016-11-08CVE-2016-7382: For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows…
PriorityP339high7.8CVSS 3.0
AVLACLPRLUINSUCHIHAH
EPSS
0.41%
33.4th percentile
For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows or nvidia.ko for Linux) handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | nvidia-graphics-drivers | < nvidia-graphics-drivers 367.57-1 (bookworm) | nvidia-graphics-drivers 367.57-1 (bookworm) |
| debian | nvidia-graphics-drivers-legacy-340xx | < nvidia-graphics-drivers 367.57-1 (bookworm) | nvidia-graphics-drivers 367.57-1 (bookworm) |
| nvidia | gpu_driver | — | — |
| nvidia | gpu_driver | — | — |
| nvidia | gpu_driver | — | — |
| nvidia | gpu_driver | — | — |
| nvidia | gpu_driver | — | — |
| nvidia | gpu_driver | — | — |
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
osv7.8HIGH
vendor_debian7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-mv66-58mr-wjh5: For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm
ghsa_unreviewed·2022-05-17
CVE-2016-7382 [HIGH] GHSA-mv66-58mr-wjh5: For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm
For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows or nvidia.ko for Linux) handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges.
OSV
CVE-2016-7382: For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm
osv·2016-11-08·CVSS 7.8
CVE-2016-7382 [HIGH] CVE-2016-7382: For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm
For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows or nvidia.ko for Linux) handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges.
Ubuntu
NVIDIA graphics drivers vulnerabilities
vendor_ubuntu·2016-11-03
CVE-2016-7382 NVIDIA graphics drivers vulnerabilities
Title: NVIDIA graphics drivers vulnerabilities
Summary: NVIDIA graphics drivers could be made to run programs as an administrator.
It was discovered that the NVIDIA graphics drivers incorrectly sanitized
user mode inputs. A local attacker could use this issue to possibly gain
root privileges.
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
Debian
CVE-2016-7382: nvidia-graphics-drivers - For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driv...
vendor_debian·2016·CVSS 7.8
CVE-2016-7382 [HIGH] CVE-2016-7382: nvidia-graphics-drivers - For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driv...
For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows or nvidia.ko for Linux) handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges.
Scope: local
bookworm: resolved (fixed in 367.57-1)
bullseye: resolved (fixed in 367.57-1)
forky: resolved (fixed in 367.57-1)
sid: resolved (fixed in 367.57-1)
trixie: resolved (fixed in 367.57-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://nvidia.custhelp.com/app/answers/detail/a_id/4246http://nvidia.custhelp.com/app/answers/detail/a_id/4247http://www.securityfocus.com/bid/94177https://support.lenovo.com/us/en/solutions/LEN-10822http://nvidia.custhelp.com/app/answers/detail/a_id/4246http://nvidia.custhelp.com/app/answers/detail/a_id/4247http://www.securityfocus.com/bid/94177https://support.lenovo.com/us/en/solutions/LEN-10822
2016-11-08
Published