ID CVE-2022-28184
Summary NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an unprivileged regular user can access administrator- privileged registers, which may lead to denial of service, information disclosure, and data tampering.
References
Vulnerable Configurations
  • cpe:2.3:a:nvidia:gpu_display_driver:-:*:*:*:*:windows:*:*
    cpe:2.3:a:nvidia:gpu_display_driver:-:*:*:*:*:windows:*:*
  • cpe:2.3:a:nvidia:gpu_display_driver:-:*:*:*:*:linux:*:*
    cpe:2.3:a:nvidia:gpu_display_driver:-:*:*:*:*:linux:*:*
  • cpe:2.3:a:nvidia:virtual_gpu:13.0:*:*:*:*:*:*:*
    cpe:2.3:a:nvidia:virtual_gpu:13.0:*:*:*:*:*:*:*
  • cpe:2.3:a:nvidia:virtual_gpu:13.1:*:*:*:*:*:*:*
    cpe:2.3:a:nvidia:virtual_gpu:13.1:*:*:*:*:*:*:*
  • cpe:2.3:a:nvidia:virtual_gpu:13.2:*:*:*:*:*:*:*
    cpe:2.3:a:nvidia:virtual_gpu:13.2:*:*:*:*:*:*:*
  • cpe:2.3:a:nvidia:virtual_gpu:11.0:*:*:*:*:*:*:*
    cpe:2.3:a:nvidia:virtual_gpu:11.0:*:*:*:*:*:*:*
  • cpe:2.3:a:nvidia:virtual_gpu:11.6:*:*:*:*:*:*:*
    cpe:2.3:a:nvidia:virtual_gpu:11.6:*:*:*:*:*:*:*
  • cpe:2.3:a:nvidia:virtual_gpu:11.7:*:*:*:*:*:*:*
    cpe:2.3:a:nvidia:virtual_gpu:11.7:*:*:*:*:*:*:*
  • cpe:2.3:a:nvidia:virtual_gpu:14.0:*:*:*:*:*:*:*
    cpe:2.3:a:nvidia:virtual_gpu:14.0:*:*:*:*:*:*:*
CVSS
Base: 4.6 (as of 15-10-2023 - 01:55)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:P/A:P
Last major update 15-10-2023 - 01:55
Published 17-05-2022 - 20:15
Last modified 15-10-2023 - 01:55
Back to Top