6.1
CVE-2021-1094
- EPSS 0.36%
- Veröffentlicht 22.07.2021 05:15:08
- Zuletzt bearbeitet 21.11.2024 05:43:35
- Erkennungen
LoginNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where an out of bounds array access may lead to denial of service or information disclosure.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 418.197.02 < 418.211.00
Nvidia ≫ Gpu Display Driver SwPlatform windows Version >= 427.33 < 427.48
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 450.119.03 < 450.142.00
Nvidia ≫ Gpu Display Driver SwPlatform windows Version >= 452.96 < 453.10
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 460.73.01 < 460.91.03
Nvidia ≫ Gpu Display Driver SwPlatform windows Version >= 462.31 < 462.96
Debian ≫ Debian Linux Version 9.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.36% | 0.29 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 6.1 | 1.8 | 4.2 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
|
| NIST | 3.6 | 3.9 | 4.9 |
AV:L/AC:L/Au:N/C:P/I:N/A:P
|
| Nvidia | 6.1 | 1.8 | 4.2 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
|
CWE-125 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
https://security.gentoo.org/glsa/202310-02
https://lists.debian.org/debian-lts-announce/2022/01/msg00013.html
https://nvidia.custhelp.com/app/answers/detail/a_id/5211