Vulnerabilities
Misconfiguration
Runtime Security
Compliance
CVE Vulnerabilities

CVE-2016-7382

Published: Nov 08, 2016 | Modified: Jan 20, 2017
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
HIGH
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2016-7382
CWEhttps://cwe.mitre.org/data/definitions/275.html

For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows or nvidia.ko for Linux) handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges.

Affected Software

Name Vendor Start Version End Version
Gpu_driver Nvidia 304.131 (including) 304.131 (including)
Gpu_driver Nvidia 340.98 (including) 340.98 (including)
Gpu_driver Nvidia 361.93.02 (including) 361.93.02 (including)
Gpu_driver Nvidia 367.44 (including) 367.44 (including)
Gpu_driver Nvidia 367.54 (including) 367.54 (including)
Gpu_driver Nvidia 370.23 (including) 370.23 (including)
Nvidia-graphics-drivers Ubuntu precise *
Nvidia-graphics-drivers-173 Ubuntu precise *
Nvidia-graphics-drivers-173 Ubuntu trusty *
Nvidia-graphics-drivers-173-updates Ubuntu precise *
Nvidia-graphics-drivers-304 Ubuntu precise *
Nvidia-graphics-drivers-304 Ubuntu trusty *
Nvidia-graphics-drivers-304 Ubuntu xenial *
Nvidia-graphics-drivers-304-updates Ubuntu precise *
Nvidia-graphics-drivers-304-updates Ubuntu trusty *
Nvidia-graphics-drivers-340 Ubuntu precise *
Nvidia-graphics-drivers-340 Ubuntu trusty *
Nvidia-graphics-drivers-340 Ubuntu xenial *
Nvidia-graphics-drivers-340-updates Ubuntu precise *
Nvidia-graphics-drivers-340-updates Ubuntu trusty *
Nvidia-graphics-drivers-340-updates Ubuntu xenial *
Nvidia-graphics-drivers-352 Ubuntu trusty *
Nvidia-graphics-drivers-352 Ubuntu xenial *
Nvidia-graphics-drivers-352-updates Ubuntu trusty *
Nvidia-graphics-drivers-352-updates Ubuntu xenial *
Nvidia-graphics-drivers-361 Ubuntu xenial *
Nvidia-graphics-drivers-96 Ubuntu precise *
Nvidia-graphics-drivers-96-updates Ubuntu precise *

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2024 Aqua Security Software Ltd.   Privacy Policy | Terms of Use