7.1

CVE-2022-34677

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause an integer to be truncated, which may lead to denial of service or data tampering.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 390 < 390.157
   Nvidia ≫ Geforce Version -
   Nvidia ≫ Nvs Version -
   Nvidia ≫ Quadro Version -
   Nvidia ≫ Rtx Version -
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 470 < 470.161.03
   Nvidia ≫ Geforce Version -
   Nvidia ≫ Nvs Version -
   Nvidia ≫ Quadro Version -
   Nvidia ≫ Rtx Version -
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 510 < 510.108.03
   Nvidia ≫ Geforce Version -
   Nvidia ≫ Nvs Version -
   Nvidia ≫ Quadro Version -
   Nvidia ≫ Rtx Version -
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 515 < 515.86.01
   Nvidia ≫ Geforce Version -
   Nvidia ≫ Nvs Version -
   Nvidia ≫ Quadro Version -
   Nvidia ≫ Rtx Version -
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 525 < 525.60.11
   Nvidia ≫ Geforce Version -
   Nvidia ≫ Nvs Version -
   Nvidia ≫ Quadro Version -
   Nvidia ≫ Rtx Version -
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 450 < 450.216.04
   Nvidia ≫ Tesla Version -
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 470 < 470.161.03
   Nvidia ≫ Tesla Version -
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 510 < 510.108.03
   Nvidia ≫ Tesla Version -
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 515 < 515.86.01
   Nvidia ≫ Tesla Version -
Nvidia ≫ Gpu Display Driver SwPlatform linux Version >= 525 < 525.60.11
   Nvidia ≫ Tesla Version -
Nvidia ≫ Cloud Gaming Version < 525.60.12
Nvidia ≫ Virtual Gpu Version < 11.11
   Citrix ≫ Hypervisor Version -
   Linux ≫ Linux Kernel Version -
   Redhat ≫ Enterprise Linux Kernel-based Virtual Machine Version -
   VMware ≫ Vsphere Version -
Nvidia ≫ Virtual Gpu Version >= 12.0 < 13.6
   Citrix ≫ Hypervisor Version -
   Linux ≫ Linux Kernel Version -
   Redhat ≫ Enterprise Linux Kernel-based Virtual Machine Version -
   VMware ≫ Vsphere Version -
Nvidia ≫ Virtual Gpu Version >= 14.0 < 14.4
   Citrix ≫ Hypervisor Version -
   Linux ≫ Linux Kernel Version -
   Redhat ≫ Enterprise Linux Kernel-based Virtual Machine Version -
   VMware ≫ Vsphere Version -
Nvidia ≫ Cloud Gaming Version < 525.60.11
   Linux ≫ Linux Kernel Version -
Debian ≫ Debian Linux Version 10.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.29% 0.2
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.1 1.8 5.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Nvidia 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CWE-681 Incorrect Conversion between Numeric Types

When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.

https://security.gentoo.org/glsa/202310-02
Third Party Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5415
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html
Mailing List