CVE-2024-0074
published 2024-03-27CVE-2024-0074: NVIDIA GPU Display Driver for Linux contains a vulnerability where an attacker may access a memory location after the end of the buffer. A successful exploit…
PriorityP429high7.1CVSS 3.1
AVLACLPRLUINSUCNIHAH
EPSS
0.20%
10.1th percentile
NVIDIA GPU Display Driver for Linux contains a vulnerability where an attacker may access a memory location after the end of the buffer. A successful exploit of this vulnerability may lead to denial of service and data tampering.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | nvidia-graphics-drivers | < nvidia-graphics-drivers 470.239.06-1 (bullseye) | nvidia-graphics-drivers 470.239.06-1 (bullseye) |
| debian | nvidia-graphics-drivers-legacy-340xx | < nvidia-graphics-drivers 470.239.06-1 (bullseye) | nvidia-graphics-drivers 470.239.06-1 (bullseye) |
| debian | nvidia-graphics-drivers-legacy-390xx | < nvidia-graphics-drivers 470.239.06-1 (bullseye) | nvidia-graphics-drivers 470.239.06-1 (bullseye) |
| debian | nvidia-graphics-drivers-tesla | < nvidia-graphics-drivers 470.239.06-1 (bullseye) | nvidia-graphics-drivers 470.239.06-1 (bullseye) |
| debian | nvidia-graphics-drivers-tesla-418 | < nvidia-graphics-drivers 470.239.06-1 (bullseye) | nvidia-graphics-drivers 470.239.06-1 (bullseye) |
| debian | nvidia-graphics-drivers-tesla-450 | < nvidia-graphics-drivers 470.239.06-1 (bullseye) | nvidia-graphics-drivers 470.239.06-1 (bullseye) |
| debian | nvidia-graphics-drivers-tesla-460 | < nvidia-graphics-drivers 470.239.06-1 (bullseye) | nvidia-graphics-drivers 470.239.06-1 (bullseye) |
| debian | nvidia-graphics-drivers-tesla-470 | < nvidia-graphics-drivers 470.239.06-1 (bullseye) | nvidia-graphics-drivers 470.239.06-1 (bullseye) |
| debian | nvidia-open-gpu-kernel-modules | < nvidia-graphics-drivers 470.239.06-1 (bullseye) | nvidia-graphics-drivers 470.239.06-1 (bullseye) |
CVSS provenance
nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
osv7.1HIGH
vendor_debian7.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2024-0074: nvidia-graphics-drivers - NVIDIA GPU Display Driver for Linux contains a vulnerability where an attacker m...
vendor_debian·2024·CVSS 7.1
CVE-2024-0074 [HIGH] CVE-2024-0074: nvidia-graphics-drivers - NVIDIA GPU Display Driver for Linux contains a vulnerability where an attacker m...
NVIDIA GPU Display Driver for Linux contains a vulnerability where an attacker may access a memory location after the end of the buffer. A successful exploit of this vulnerability may lead to denial of service and data tampering.
Scope: local
bookworm: open
bullseye: resolved (fixed in 470.239.06-1)
forky: resolved (fixed in 550.144.03-1)
sid: resolved (fixed in 550.144.03-1)
trixie: resolved (fixed in 550.144.03-1)
OSV
CVE-2024-0074: NVIDIA GPU Display Driver for Linux contains a vulnerability where an attacker may access a memory location after the end of the buffer
osv·2024-03-27·CVSS 7.1
CVE-2024-0074 [HIGH] CVE-2024-0074: NVIDIA GPU Display Driver for Linux contains a vulnerability where an attacker may access a memory location after the end of the buffer
NVIDIA GPU Display Driver for Linux contains a vulnerability where an attacker may access a memory location after the end of the buffer. A successful exploit of this vulnerability may lead to denial of service and data tampering.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-03-27
Published