CVE Vulnerabilities

CVE-2016-7382

Published: Nov 08, 2016 | Modified: Jan 20, 2017
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows or nvidia.ko for Linux) handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges.

Affected Software

Name Vendor Start Version End Version
Gpu_driver Nvidia 304.131 (including) 304.131 (including)
Gpu_driver Nvidia 340.98 (including) 340.98 (including)
Gpu_driver Nvidia 361.93.02 (including) 361.93.02 (including)
Gpu_driver Nvidia 367.44 (including) 367.44 (including)
Gpu_driver Nvidia 367.54 (including) 367.54 (including)
Gpu_driver Nvidia 370.23 (including) 370.23 (including)

References