5.5
CVE-2021-1095
- EPSS 0.41%
- Veröffentlicht 22.07.2021 05:15:08
- Zuletzt bearbeitet 21.11.2024 05:43:35
- Erkennungen
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handlers for all control calls with embedded parameters where dereferencing an untrusted pointer may lead to denial of service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 418.197.02 < 418.211.00
Nvidia ≫ Gpu Display Driver SwPlatform windows Version >= 427.33 < 427.48
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 450.119.03 < 450.142.00
Nvidia ≫ Gpu Display Driver SwPlatform windows Version >= 452.96 < 453.10
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 460.73.01 < 460.91.03
Nvidia ≫ Gpu Display Driver SwPlatform windows Version >= 462.31 < 462.96
Debian ≫ Debian Linux Version 9.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.41% | 0.329 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
| NIST | 2.1 | 3.9 | 2.9 |
AV:L/AC:L/Au:N/C:N/I:N/A:P
|
| Nvidia | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
CWE-476 NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
https://security.gentoo.org/glsa/202310-02
https://lists.debian.org/debian-lts-announce/2022/01/msg00013.html
https://nvidia.custhelp.com/app/answers/detail/a_id/5211