CVE-2016-5025

EPSS 0.07%
Veröffentlicht 08.11.2016 20:59:04
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle psirt@nvidia.com
Teams Watchlist Login
Unerledigt Login

For the NVIDIA Quadro, NVS, and GeForce products, improper sanitization of parameters in the NVAPI support layer causes a denial of service vulnerability (blue screen crash) within the NVIDIA Windows graphics drivers.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Nvidia ≫ Gpu Driver Version >= 340 < 341.96

   Nvidia ≫ Geforce 910m Version-
   Nvidia ≫ Geforce 920m Version-
   Nvidia ≫ Geforce 920mx Version-
   Nvidia ≫ Geforce 930m Version-
   Nvidia ≫ Geforce 930mx Version-
   Nvidia ≫ Geforce 940m Version-
   Nvidia ≫ Geforce 940mx Version-
   Nvidia ≫ Geforce 945m Version-
   Nvidia ≫ Geforce Gt 710 Version-
   Nvidia ≫ Geforce Gt 730 Version-
   Nvidia ≫ Geforce Gtx 1050 Version-
   Nvidia ≫ Geforce Gtx 1060 Version-
   Nvidia ≫ Geforce Gtx 1070 Version-
   Nvidia ≫ Geforce Gtx 1080 Version-
   Nvidia ≫ Geforce Gtx 950m Version-
   Nvidia ≫ Geforce Gtx 960m Version-
   Nvidia ≫ Geforce Gtx 965m Version-
   Nvidia ≫ Nvs 310 Version-
   Nvidia ≫ Nvs 315 Version-
   Nvidia ≫ Nvs 510 Version-
   Nvidia ≫ Nvs 810 Version-
   Nvidia ≫ Quadro K1200 Version-
   Nvidia ≫ Quadro K420 Version-
   Nvidia ≫ Quadro K620 Version-
   Nvidia ≫ Quadro M1000m Version-
   Nvidia ≫ Quadro M2000 Version-
   Nvidia ≫ Quadro M2000m Version-
   Nvidia ≫ Quadro M3000m Version-
   Nvidia ≫ Quadro M4000 Version-
   Nvidia ≫ Quadro M4000m Version-
   Nvidia ≫ Quadro M5000 Version-
   Nvidia ≫ Quadro M5000m Version-
   Nvidia ≫ Quadro M500m Version-
   Nvidia ≫ Quadro M5500 Version-
   Nvidia ≫ Quadro M6000 Version-
   Nvidia ≫ Quadro M600m Version-
   Nvidia ≫ Quadro P5000 Version-
   Nvidia ≫ Quadro P6000 Version-
   Nvidia ≫ Titan X Version-

Nvidia ≫ Gpu Driver Version >= 352.0 < 354.99

Nvidia ≫ Gpu Driver Version >= 361 < 362.77

Nvidia ≫ Gpu Driver Version >= 367 < 368.39

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.07%	0.206

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.6	1.8	4.7	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
nvd@nist.gov	6.1	3.9	8.5	AV:L/AC:L/Au:N/C:P/I:P/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://nvidia.custhelp.com/app/answers/detail/a_id/4213

Patch

Vendor Advisory

http://www.securityfocus.com/bid/93251

Third Party Advisory

VDB Entry

https://support.lenovo.com/us/en/product_security/ps500070

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2016-5025

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-5025

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-5025

EUVD