6.5

CVE-2018-3979

Exploit
A remote denial-of-service vulnerability exists in the way the Nouveau Display Driver (the default Ubuntu Nvidia display driver) handles GPU shader execution. A specially crafted pixel shader can cause remote denial-of-service issues. An attacker can provide a specially crafted website to trigger this vulnerability. This vulnerability can be triggered remotely after the user visits a malformed website. No further user interaction is required. Vulnerable versions include Ubuntu 18.04 LTS (linux 4.15.0-29-generic x86_64), Nouveau Display Driver NV117 (vermagic: 4.15.0-29-generic SMP mod_unload).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Canonical ≫ Ubuntu Linux Version 18.04 SwEdition lts
Nvidia ≫ Geforce Gtx 745 Firmware Version -
   Nvidia ≫ Geforce Gtx 745 Version -
Nvidia ≫ Geforce Gtx 750 Firmware Version -
   Nvidia ≫ Geforce Gtx 750 Version -
Nvidia ≫ Geforce Gtx 750 Ti Firmware Version -
   Nvidia ≫ Geforce Gtx 750 Ti Version -
Nvidia ≫ Geforce Gtx 840m Firmware Version -
   Nvidia ≫ Geforce Gtx 840m Version -
Nvidia ≫ Geforce Gtx 845m Firmware Version -
   Nvidia ≫ Geforce Gtx 845m Version -
Nvidia ≫ Geforce Gtx 850m Firmware Version -
   Nvidia ≫ Geforce Gtx 850m Version -
Nvidia ≫ Geforce Gtx 860m Firmware Version -
   Nvidia ≫ Geforce Gtx 860m Version -
Nvidia ≫ Geforce Gtx 950m Firmware Version -
   Nvidia ≫ Geforce Gtx 950m Version -
Nvidia ≫ Geforce Gtx 960m Firmware Version -
   Nvidia ≫ Geforce Gtx 960m Version -
Nvidia ≫ Quadro K620 Firmware Version -
   Nvidia ≫ Quadro K620 Version -
Nvidia ≫ Quadro K1200 Firmware Version -
   Nvidia ≫ Quadro K1200 Version -
Nvidia ≫ Quadro K2200 Firmware Version -
   Nvidia ≫ Quadro K2200 Version -
Nvidia ≫ Quadro M1000m Firmware Version -
   Nvidia ≫ Quadro M1000m Version -
Nvidia ≫ Quadro M1200m Firmware Version -
   Nvidia ≫ Quadro M1200m Version -
Nvidia ≫ Grid M30 Firmware Version -
   Nvidia ≫ Grid M30 Version -
Nvidia ≫ Grid M40 Firmware Version -
   Nvidia ≫ Grid M40 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.44% 0.697
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
Cisco Talos 7.4 2.8 4
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

https://talosintelligence.com/vulnerability_reports/TALOS-2018-0647
Third Party Advisory
Exploit