5.5
CVE-2021-1095
- EPSS 0.41%
- Veröffentlicht 22.07.2021 05:15:08
- Zuletzt bearbeitet 21.11.2024 05:43:35
- Quelle psirt@nvidia.com
- CVE-Watchlists
- Unerledigt
LoginNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handlers for all control calls with embedded parameters where dereferencing an untrusted pointer may lead to denial of service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nvidia ≫ Gpu Display Driver SwPlatformlinux Version >= 418.197.02 < 418.211.00
Nvidia ≫ Gpu Display Driver SwPlatformwindows Version >= 427.33 < 427.48
Nvidia ≫ Gpu Display Driver SwPlatformlinux Version >= 450.119.03 < 450.142.00
Nvidia ≫ Gpu Display Driver SwPlatformwindows Version >= 452.96 < 453.10
Nvidia ≫ Gpu Display Driver SwPlatformlinux Version >= 460.73.01 < 460.91.03
Nvidia ≫ Gpu Display Driver SwPlatformwindows Version >= 462.31 < 462.96
Debian ≫ Debian Linux Version9.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.41% | 0.329 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 2.1 | 3.9 | 2.9 |
AV:L/AC:L/Au:N/C:N/I:N/A:P
|
| psirt@nvidia.com | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
CWE-476 NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
https://security.gentoo.org/glsa/202310-02
https://lists.debian.org/debian-lts-announce/2022/01/msg00013.html
https://nvidia.custhelp.com/app/answers/detail/a_id/5211