7.8

CVE-2022-34670

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause truncation errors when casting a primitive to a primitive of smaller size causes data to be lost in the conversion, which may lead to denial of service or information disclosure.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 390 < 390.157
   Nvidia ≫ Geforce Version -
   Nvidia ≫ Nvs Version -
   Nvidia ≫ Quadro Version -
   Nvidia ≫ Rtx Version -
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 470 < 470.161.03
   Nvidia ≫ Geforce Version -
   Nvidia ≫ Nvs Version -
   Nvidia ≫ Quadro Version -
   Nvidia ≫ Rtx Version -
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 510 < 510.108.03
   Nvidia ≫ Geforce Version -
   Nvidia ≫ Nvs Version -
   Nvidia ≫ Quadro Version -
   Nvidia ≫ Rtx Version -
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 515 < 515.86.01
   Nvidia ≫ Geforce Version -
   Nvidia ≫ Nvs Version -
   Nvidia ≫ Quadro Version -
   Nvidia ≫ Rtx Version -
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 525 < 525.60.11
   Nvidia ≫ Geforce Version -
   Nvidia ≫ Nvs Version -
   Nvidia ≫ Quadro Version -
   Nvidia ≫ Rtx Version -
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 450 < 450.216.04
   Nvidia ≫ Tesla Version -
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 470 < 470.161.03
   Nvidia ≫ Tesla Version -
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 510 < 510.108.03
   Nvidia ≫ Tesla Version -
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 515 < 515.86.01
   Nvidia ≫ Tesla Version -
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 525 < 525.60.11
   Nvidia ≫ Tesla Version -
Nvidia ≫ Virtual Gpu Version < 11.11
   Citrix ≫ Hypervisor Version -
   Linux ≫ Linux Kernel Version -
   Redhat ≫ Enterprise Linux Kernel-based Virtual Machine Version -
   VMware ≫ Vsphere Version -
Nvidia ≫ Virtual Gpu Version >= 12.0 < 13.6
   Citrix ≫ Hypervisor Version -
   Linux ≫ Linux Kernel Version -
   Redhat ≫ Enterprise Linux Kernel-based Virtual Machine Version -
   VMware ≫ Vsphere Version -
Nvidia ≫ Virtual Gpu Version >= 14.0 < 14.4
   Citrix ≫ Hypervisor Version -
   Linux ≫ Linux Kernel Version -
   Redhat ≫ Enterprise Linux Kernel-based Virtual Machine Version -
   VMware ≫ Vsphere Version -
Nvidia ≫ Cloud Gaming Version < 525.60.11
   Linux ≫ Linux Kernel Version -
Nvidia ≫ Cloud Gaming Version < 525.60.12
Debian ≫ Debian Linux Version 10.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.27% 0.192
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Nvidia 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-197 Numeric Truncation Error

Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.

CWE-681 Incorrect Conversion between Numeric Types

When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.

https://security.gentoo.org/glsa/202310-02
Third Party Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5415
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html
Mailing List