CVE-2018-6260
published 2018-11-13CVE-2018-6260: NVIDIA graphics driver contains a vulnerability that may allow access to application data processed on the GPU through a side channel exposed by the GPU…
PriorityP424medium5.5CVSS 3.0
AVLACLPRLUINSUCHINAN
EPSS
0.39%
31.9th percentile
NVIDIA graphics driver contains a vulnerability that may allow access to application data processed on the GPU through a side channel exposed by the GPU performance counters. Local user access is required. This is not a network or remote attack vector.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | nvidia-graphics-drivers | < nvidia-graphics-drivers 410.104-1 (bookworm) | nvidia-graphics-drivers 410.104-1 (bookworm) |
| debian | nvidia-graphics-drivers-legacy-340xx | < nvidia-graphics-drivers 410.104-1 (bookworm) | nvidia-graphics-drivers 410.104-1 (bookworm) |
| debian | nvidia-graphics-drivers-legacy-390xx | < nvidia-graphics-drivers 410.104-1 (bookworm) | nvidia-graphics-drivers 410.104-1 (bookworm) |
| nvidia_corporation | gpu_graphics_driver | — | — |
CVSS provenance
nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
osv5.5MEDIUM
vendor_debian5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-ppf8-x3x5-v226: NVIDIA graphics driver contains a vulnerability that may allow access to application data processed on the GPU through a side channel exposed by the G
ghsa_unreviewed·2022-05-14
CVE-2018-6260 [MEDIUM] CWE-200 GHSA-ppf8-x3x5-v226: NVIDIA graphics driver contains a vulnerability that may allow access to application data processed on the GPU through a side channel exposed by the G
NVIDIA graphics driver contains a vulnerability that may allow access to application data processed on the GPU through a side channel exposed by the GPU performance counters. Local user access is required. This is not a network or remote attack vector.
OSV
CVE-2018-6260: NVIDIA graphics driver contains a vulnerability that may allow access to application data processed on the GPU through a side channel exposed by the G
osv·2018-11-13·CVSS 5.5
CVE-2018-6260 [MEDIUM] CVE-2018-6260: NVIDIA graphics driver contains a vulnerability that may allow access to application data processed on the GPU through a side channel exposed by the G
NVIDIA graphics driver contains a vulnerability that may allow access to application data processed on the GPU through a side channel exposed by the GPU performance counters. Local user access is required. This is not a network or remote attack vector.
Ubuntu
NVIDIA graphics drivers vulnerability
vendor_ubuntu·2019-03-07
CVE-2018-6260 NVIDIA graphics drivers vulnerability
Title: NVIDIA graphics drivers vulnerability
Summary: NVIDIA graphics drivers could be made to expose sensitive information.
It was discovered that the NVIDIA graphics drivers incorrectly handled the
GPU performance counters. A local attacker could possibly use this issue to
access the application data processed on the GPU.
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
Debian
CVE-2018-6260: nvidia-graphics-drivers - NVIDIA graphics driver contains a vulnerability that may allow access to applica...
vendor_debian·2018·CVSS 5.5
CVE-2018-6260 [MEDIUM] CVE-2018-6260: nvidia-graphics-drivers - NVIDIA graphics driver contains a vulnerability that may allow access to applica...
NVIDIA graphics driver contains a vulnerability that may allow access to application data processed on the GPU through a side channel exposed by the GPU performance counters. Local user access is required. This is not a network or remote attack vector.
Scope: local
bookworm: resolved (fixed in 410.104-1)
bullseye: resolved (fixed in 410.104-1)
forky: resolved (fixed in 410.104-1)
sid: resolved (fixed in 410.104-1)
trixie: resolved (fixed in 410.104-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://support.lenovo.com/us/en/solutions/LEN-26250https://nvidia.custhelp.com/app/answers/detail/a_id/4738https://nvidia.custhelp.com/app/answers/detail/a_id/4772https://usn.ubuntu.com/3904-1/http://support.lenovo.com/us/en/solutions/LEN-26250https://nvidia.custhelp.com/app/answers/detail/a_id/4738https://nvidia.custhelp.com/app/answers/detail/a_id/4772https://usn.ubuntu.com/3904-1/
2018-11-13
Published