CVE-2020-5964

CWE-345CWE-3544 documents4 sources
Severity
7.8HIGH
EPSS
0.1%
top 77.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Nvidia Geforce ExperienceNvidia Geforce FirmwareNvidia NVS Firmware+3 more
Timeline
PublishedJun 25
Latest updateMay 24

Description

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host component, in which the application resources integrity check may be missed. Such an attack may lead to code execution, denial of service or information disclosure.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages6 packages

▶NVDnvidia/nvs_firmware390 — 392.61+3
▶NVDnvidia/tesla_firmware418 — 426.78+2
▶NVDnvidia/quadro_firmware390 — 392.61+3
▶NVDnvidia/geforce_firmware450 — 451.48

🔴Vulnerability Details

2
GHSA
GHSA-hw4m-h99v-xhm3: NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host component, in which the application resources integrity↗2022-05-24
▶
CVEList
CVE-2020-5964: NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host component, in which the application resources integrity↗2020-06-25
▶

💬Community

1
Bugzilla
CVE-2020-25677 ceph-ansible: insecure ownership on /etc/ceph/iscsi-gateway.conf configuration file↗2020-10-27
▶
CVE-2020-5964 (HIGH CVSS 7.8) | NVIDIA Windows GPU Display Driver | cvebase.io