CVE-2017-6272
published 2017-09-22CVE-2017-6272: NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated…
PriorityP335high7.8CVSS 3.0
AVLACLPRLUINSUCHIHAH
EPSS
0.43%
34.6th percentile
NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to a denial of service or possible escalation of privileges.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | nvidia-graphics-drivers | < nvidia-graphics-drivers 384.98-2 (bookworm) | nvidia-graphics-drivers 384.98-2 (bookworm) |
| debian | nvidia-graphics-drivers-legacy-340xx | < nvidia-graphics-drivers 384.98-2 (bookworm) | nvidia-graphics-drivers 384.98-2 (bookworm) |
| nvidia | gpu_driver | <= 362.00 | — |
| nvidia_corporation | gpu_display_driver | — | — |
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
osv7.8HIGH
vendor_debian7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
NVIDIA graphics drivers vulnerabilities
vendor_ubuntu·2017-10-23
CVE-2017-6257 NVIDIA graphics drivers vulnerabilities
Title: NVIDIA graphics drivers vulnerabilities
Summary: NVIDIA graphics drivers could be made to crash or run programs as an
administrator.
It was discovered that the NVIDIA graphics drivers contained flaws in the
kernel mode layer. A local attacker could use these issues to cause a
denial of service or potentially escalate their privileges on the system.
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
Debian
CVE-2017-6272: nvidia-graphics-drivers - NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer hand...
vendor_debian·2017·CVSS 7.8
CVE-2017-6272 [HIGH] CVE-2017-6272: nvidia-graphics-drivers - NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer hand...
NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to a denial of service or possible escalation of privileges.
Scope: local
bookworm: resolved (fixed in 384.98-2)
bullseye: resolved (fixed in 384.98-2)
forky: resolved (fixed in 384.98-2)
sid: resolved (fixed in 384.98-2)
trixie: resolved (fixed in 384.98-2)
GHSA
GHSA-jjrv-f6v8-pv78: NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly va
ghsa_unreviewed·2022-05-17
CVE-2017-6272 [HIGH] CWE-20 GHSA-jjrv-f6v8-pv78: NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly va
NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to a denial of service or possible escalation of privileges.
OSV
CVE-2017-6272: NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly va
osv·2017-09-22·CVSS 7.8
CVE-2017-6272 [HIGH] CVE-2017-6272: NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly va
NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to a denial of service or possible escalation of privileges.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2017-09-22
Published