CVE-2017-6272

CWE-20 — Improper Input Validation6 documents6 sources
Severity
7.8HIGH
EPSS
0.1%
top 69.22%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Nvidia GPU DriverNvidia Corporation GPU Display Driver
Timeline
PublishedSep 22
Latest updateMay 17

Description

NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to a denial of service or possible escalation of privileges.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages3 packages

▶Debiannvidia-graphics-drivers< 384.98-2+3
▶NVDnvidia/gpu_driver362.00

🔴Vulnerability Details

3
GHSA
GHSA-jjrv-f6v8-pv78: NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly va↗2022-05-17
▶
CVEList
CVE-2017-6272: NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly va↗2017-09-22
▶
OSV
CVE-2017-6272: NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly va↗2017-09-22
▶

📋Vendor Advisories

2
Ubuntu
NVIDIA graphics drivers vulnerabilities↗2017-10-23
▶
Debian
CVE-2017-6272: nvidia-graphics-drivers - NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer hand...↗2017
▶
CVE-2017-6272 (HIGH CVSS 7.8) | NVIDIA GPU Display Driver contains | cvebase.io