Vulnerability-Lookup

WID-SEC-W-2022-2205

Vulnerability from csaf_certbund - Published: 2022-11-30 23:00 - Updated: 2024-03-12 23:00

Summary

Nvidia Treiber: Mehrere Schwachstellen

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: NVidia ist ein Hersteller von Grafikkarten.

Angriff: Ein lokaler Angreifer kann mehrere Schwachstellen im Nvidia Treiber ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand auszulösen, seine Privilegien zu erweitern und Daten zu manipulieren.

Betroffene Betriebssysteme: - BIOS/Firmware

CVE-2022-34669

Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand auszulösen, seine Privilegien zu erweitern und Daten zu manipulieren.

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-34670

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-34671

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-34672

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-34673

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-34674

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-34675

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-34676

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-34677

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-34678

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-34679

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-34680

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-34681

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-34682

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-34683

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-34684

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-42254

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-42255

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-42256

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-42257

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-42258

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-42259

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-42260

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-42261

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-42262

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-42263

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-42264

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-42265

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-42266

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

CVE-2022-42267

Affected products

Known affected 9 products

Product	Identifier	Version
Dell Computer Dell	`cpe:/o:dell:dell_computer:-`	—
HP Computer HP	`cpe:/h:hp:computer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Xerox FreeFlow Print Server v9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v9`	v9
Lenovo Computer Lenovo	`cpe:/h:lenovo:computer:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Nvidia Treiber vGPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:vgpu`	vGPU
Nvidia Treiber GPU Nvidia / Treiber	`cpe:/a:nvidia:display_driver:gpu`	GPU

References

12 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://nvidia.custhelp.com/app/answers/detail/a_…	external
https://support.hp.com/us-en/document/ish_7564022…	external
https://www.dell.com/support/kbdoc/de-de/00020572…	external
https://lists.debian.org/debian-lts-announce/2023…	external
https://support.lenovo.com/us/en/product_security…	external
https://support.hp.com/us-en/document/ish_9209725…	external
https://security.gentoo.org/glsa/202310-02	external
https://security.business.xerox.com/wp-content/up…	external
https://security.business.xerox.com/wp-content/up…	external
https://support.lenovo.com/us/en/product_security…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "NVidia ist ein Hersteller von Grafikkarten.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein lokaler Angreifer kann mehrere Schwachstellen im Nvidia Treiber ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- BIOS/Firmware",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2022-2205 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-2205.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2022-2205 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-2205"
      },
      {
        "category": "external",
        "summary": "Security Bulletin: NVIDIA GPU Display Driver - November 2022 vom 2022-11-30",
        "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
      },
      {
        "category": "external",
        "summary": "HP Security Bulletin HPSBHF03832 vom 2023-01-21",
        "url": "https://support.hp.com/us-en/document/ish_7564022-7564052-16/HPSBHF03832"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2022-324",
        "url": "https://www.dell.com/support/kbdoc/de-de/000205722/dsa-2022-324"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-3418 vom 2023-05-11",
        "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html"
      },
      {
        "category": "external",
        "summary": "Lenovo Security Advisory LEN-129488 vom 2023-07-11",
        "url": "https://support.lenovo.com/us/en/product_security/ps500566-nvidia-display-driver-advisory-june-2023"
      },
      {
        "category": "external",
        "summary": "HP Security Bulletin HPSBHF03867 vom 2023-09-12",
        "url": "https://support.hp.com/us-en/document/ish_9209725-9209750-16/HPSBHF03867"
      },
      {
        "category": "external",
        "summary": "Gentoo Linux Security Advisory GLSA-202310-02 vom 2023-10-03",
        "url": "https://security.gentoo.org/glsa/202310-02"
      },
      {
        "category": "external",
        "summary": "XEROX Security Advisory XRX24-005 vom 2024-03-04",
        "url": "https://security.business.xerox.com/wp-content/uploads/2024/03/Xerox-Security-Bulletin-XRX24-005-Xerox-FreeFlow%C2%AE-Print-Server-v9_Feb-2024.pdf"
      },
      {
        "category": "external",
        "summary": "XEROX Security Advisory XRX24-004 vom 2024-03-04",
        "url": "https://security.business.xerox.com/wp-content/uploads/2024/03/Xerox%C2%AE-Security-Bulletin-XRX24-004-Xerox%C2%AE-FreeFlow%C2%AE-Print-Server-v7.pdf"
      },
      {
        "category": "external",
        "summary": "Lenovo Security Advisory LEN-150808 vom 2024-03-13",
        "url": "https://support.lenovo.com/us/en/product_security/LEN-150808"
      }
    ],
    "source_lang": "en-US",
    "title": "Nvidia Treiber: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2024-03-12T23:00:00.000+00:00",
      "generator": {
        "date": "2024-08-15T17:39:02.711+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.5"
        }
      },
      "id": "WID-SEC-W-2022-2205",
      "initial_release_date": "2022-11-30T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2022-11-30T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2023-01-01T23:00:00.000+00:00",
          "number": "2",
          "summary": "CVE-2022-42267 erg\u00e4nzt"
        },
        {
          "date": "2023-01-22T23:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von HP aufgenommen"
        },
        {
          "date": "2023-04-02T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Dell aufgenommen"
        },
        {
          "date": "2023-05-11T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2023-07-11T22:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von LENOVO aufgenommen"
        },
        {
          "date": "2023-09-11T22:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von HP aufgenommen"
        },
        {
          "date": "2023-10-03T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von Gentoo aufgenommen"
        },
        {
          "date": "2024-03-03T23:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von XEROX aufgenommen"
        },
        {
          "date": "2024-03-12T23:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von LENOVO aufgenommen"
        }
      ],
      "status": "final",
      "version": "10"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Dell Computer",
            "product": {
              "name": "Dell Computer",
              "product_id": "T006498",
              "product_identification_helper": {
                "cpe": "cpe:/o:dell:dell_computer:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Dell"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Gentoo Linux",
            "product": {
              "name": "Gentoo Linux",
              "product_id": "T012167",
              "product_identification_helper": {
                "cpe": "cpe:/o:gentoo:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Gentoo"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "HP Computer",
            "product": {
              "name": "HP Computer",
              "product_id": "T023191",
              "product_identification_helper": {
                "cpe": "cpe:/h:hp:computer:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "HP"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Lenovo Computer",
            "product": {
              "name": "Lenovo Computer",
              "product_id": "T026557",
              "product_identification_helper": {
                "cpe": "cpe:/h:lenovo:computer:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Lenovo"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vGPU",
                "product": {
                  "name": "Nvidia Treiber vGPU",
                  "product_id": "T016003",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:nvidia:display_driver:vgpu"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "GPU",
                "product": {
                  "name": "Nvidia Treiber GPU",
                  "product_id": "T025442",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:nvidia:display_driver:gpu"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Treiber"
          }
        ],
        "category": "vendor",
        "name": "Nvidia"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "v7",
                "product": {
                  "name": "Xerox FreeFlow Print Server v7",
                  "product_id": "T015631",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:xerox:freeflow_print_server:v7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "v9",
                "product": {
                  "name": "Xerox FreeFlow Print Server v9",
                  "product_id": "T015632",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:xerox:freeflow_print_server:v9"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "FreeFlow Print Server"
          }
        ],
        "category": "vendor",
        "name": "Xerox"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-34669",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-34669"
    },
    {
      "cve": "CVE-2022-34670",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-34670"
    },
    {
      "cve": "CVE-2022-34671",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-34671"
    },
    {
      "cve": "CVE-2022-34672",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-34672"
    },
    {
      "cve": "CVE-2022-34673",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-34673"
    },
    {
      "cve": "CVE-2022-34674",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-34674"
    },
    {
      "cve": "CVE-2022-34675",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-34675"
    },
    {
      "cve": "CVE-2022-34676",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-34676"
    },
    {
      "cve": "CVE-2022-34677",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-34677"
    },
    {
      "cve": "CVE-2022-34678",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-34678"
    },
    {
      "cve": "CVE-2022-34679",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-34679"
    },
    {
      "cve": "CVE-2022-34680",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-34680"
    },
    {
      "cve": "CVE-2022-34681",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-34681"
    },
    {
      "cve": "CVE-2022-34682",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-34682"
    },
    {
      "cve": "CVE-2022-34683",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-34683"
    },
    {
      "cve": "CVE-2022-34684",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-34684"
    },
    {
      "cve": "CVE-2022-42254",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-42254"
    },
    {
      "cve": "CVE-2022-42255",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-42255"
    },
    {
      "cve": "CVE-2022-42256",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-42256"
    },
    {
      "cve": "CVE-2022-42257",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-42257"
    },
    {
      "cve": "CVE-2022-42258",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-42258"
    },
    {
      "cve": "CVE-2022-42259",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-42259"
    },
    {
      "cve": "CVE-2022-42260",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-42260"
    },
    {
      "cve": "CVE-2022-42261",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-42261"
    },
    {
      "cve": "CVE-2022-42262",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-42262"
    },
    {
      "cve": "CVE-2022-42263",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-42263"
    },
    {
      "cve": "CVE-2022-42264",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-42264"
    },
    {
      "cve": "CVE-2022-42265",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-42265"
    },
    {
      "cve": "CVE-2022-42266",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-42266"
    },
    {
      "cve": "CVE-2022-42267",
      "notes": [
        {
          "category": "description",
          "text": "Im Nvidia Treiber existieren mehrere Schwachstellen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand auszul\u00f6sen, seine Privilegien zu erweitern und Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006498",
          "T023191",
          "2951",
          "T015632",
          "T026557",
          "T012167",
          "T015631",
          "T016003",
          "T025442"
        ]
      },
      "release_date": "2022-11-30T23:00:00.000+00:00",
      "title": "CVE-2022-42267"
    }
  ]
}

CVE-2022-34669 (GCVE-0-2022-34669)

Vulnerability from cvelistv5 – Published: 2022-12-30 00:00 – Updated: 2025-04-10 19:48

Summary

NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can access or modify system files or other files that are critical to the application, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE

CWE-73

Assigner

nvidia

References

1 reference

URL	Tags
https://nvidia.custhelp.com/app/answers/detail/a_…

Impacted products

1 product

Vendor	Product	Version
NVIDIA	vGPU software (guest driver) - Windows, NVIDIA Cloud Gaming (guest driver)	Affected: All versions prior to and including 14.2, 13.4, and 11.9, and all versions prior to the November 2022 release

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T09:15:15.865Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-34669",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-10T19:48:04.738737Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-10T19:48:17.789Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vGPU software (guest driver) - Windows, NVIDIA Cloud Gaming (guest driver)",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to and including 14.2, 13.4, and 11.9, and all versions prior to the November 2022 release"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can access or modify system files or other files that are critical to the application, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-73",
              "description": "CWE-73",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-12-30T00:00:00.000Z",
        "orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
        "shortName": "nvidia"
      },
      "references": [
        {
          "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
    "assignerShortName": "nvidia",
    "cveId": "CVE-2022-34669",
    "datePublished": "2022-12-30T00:00:00.000Z",
    "dateReserved": "2022-06-27T00:00:00.000Z",
    "dateUpdated": "2025-04-10T19:48:17.789Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-34670 (GCVE-0-2022-34670)

Vulnerability from cvelistv5 – Published: 2022-12-30 00:00 – Updated: 2025-04-11 15:44

Summary

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause truncation errors when casting a primitive to a primitive of smaller size causes data to be lost in the conversion, which may lead to denial of service or information disclosure.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-197

Assigner

nvidia

References

3 references

URL	Tags
https://nvidia.custhelp.com/app/answers/detail/a_…
https://lists.debian.org/debian-lts-announce/2023…	mailing-list
https://security.gentoo.org/glsa/202310-02	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
NVIDIA	vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager)	Affected: All versions prior to and including 14.2, 13.4, and 11.9, and all versions prior to the November 2022 release

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T09:15:15.748Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
          },
          {
            "name": "[debian-lts-announce] 20230511 [SECURITY] [DLA 3418-1] nvidia-graphics-drivers-legacy-390xx security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html"
          },
          {
            "name": "GLSA-202310-02",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202310-02"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-34670",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-11T15:44:20.810878Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-11T15:44:29.877Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager)",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to and including 14.2, 13.4, and 11.9, and all versions prior to the November 2022 release"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause truncation errors when casting a primitive to a primitive of smaller size causes data to be lost in the conversion, which may lead to denial of service or information disclosure."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-197",
              "description": "CWE-197",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-03T14:06:40.427Z",
        "orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
        "shortName": "nvidia"
      },
      "references": [
        {
          "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
        },
        {
          "name": "[debian-lts-announce] 20230511 [SECURITY] [DLA 3418-1] nvidia-graphics-drivers-legacy-390xx security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html"
        },
        {
          "name": "GLSA-202310-02",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202310-02"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
    "assignerShortName": "nvidia",
    "cveId": "CVE-2022-34670",
    "datePublished": "2022-12-30T00:00:00.000Z",
    "dateReserved": "2022-06-27T00:00:00.000Z",
    "dateUpdated": "2025-04-11T15:44:29.877Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-34671 (GCVE-0-2022-34671)

Vulnerability from cvelistv5 – Published: 2022-12-30 00:00 – Updated: 2025-04-11 15:43

Summary

NVIDIA GPU Display Driver for Windows contains a vulnerability in the user-mode layer, where an unprivileged user can cause an out-of-bounds write, which may lead to code execution, information disclosure, and denial of service.

Severity

8.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE

CWE-787 - Out-of-bounds Write

Assigner

nvidia

References

5 references

URL	Tags
https://nvidia.custhelp.com/app/answers/detail/a_…
https://nvidia.custhelp.com/app/answers/detail/a_…
https://www.talosintelligence.com/vulnerability_r…
https://www.talosintelligence.com/vulnerability_r…
https://www.talosintelligence.com/vulnerability_r…

Impacted products

1 product

Vendor	Product	Version
NVIDIA	NVIDIA GPU Display Driver for Windows	Affected: All versions prior to and including 15.2, 13.7, and 11.12, and all versions prior to and including the May 2023 release

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T09:15:15.702Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5468"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1720"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1721"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1719"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-34671",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-11T15:43:02.626051Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-11T15:43:12.854Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "NVIDIA GPU Display Driver for Windows",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to and including 15.2, 13.7, and 11.12, and all versions prior to and including the May 2023 release"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eNVIDIA GPU Display Driver for Windows contains a vulnerability in the user-mode layer, where an unprivileged user can cause an out-of-bounds write, which may lead to code execution, information disclosure, and denial of service.\u003c/span\u003e\n\n\u003c/p\u003e"
            }
          ],
          "value": "NVIDIA GPU Display Driver for Windows contains a vulnerability in the user-mode layer, where an unprivileged user can cause an out-of-bounds write, which may lead to code execution, information disclosure, and denial of service."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "Code execution, information disclosure, and denial of service"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-08-21T22:06:10.259Z",
        "orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
        "shortName": "nvidia"
      },
      "references": [
        {
          "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
        },
        {
          "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5468"
        },
        {
          "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1720"
        },
        {
          "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1721"
        },
        {
          "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1719"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
    "assignerShortName": "nvidia",
    "cveId": "CVE-2022-34671",
    "datePublished": "2022-12-30T00:00:00.000Z",
    "dateReserved": "2022-06-27T00:00:00.000Z",
    "dateUpdated": "2025-04-11T15:43:12.854Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-34672 (GCVE-0-2022-34672)

Vulnerability from cvelistv5 – Published: 2022-12-30 00:00 – Updated: 2025-04-11 15:42

Summary

NVIDIA Control Panel for Windows contains a vulnerability where an unauthorized user or an unprivileged regular user can compromise the security of the software by gaining privileges, reading sensitive information, or executing commands.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-284

Assigner

nvidia

References

1 reference

URL	Tags
https://nvidia.custhelp.com/app/answers/detail/a_…

Impacted products

1 product

Vendor	Product	Version
NVIDIA	vGPU software (guest driver) - Windows, NVIDIA Cloud Gaming (guest driver)	Affected: All versions prior to and including 14.2, 13.4, and 11.9, and all versions prior to the November 2022 release

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T09:15:15.963Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-34672",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-11T15:41:57.945708Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-11T15:42:09.845Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vGPU software (guest driver) - Windows, NVIDIA Cloud Gaming (guest driver)",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to and including 14.2, 13.4, and 11.9, and all versions prior to the November 2022 release"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "NVIDIA Control Panel for Windows contains a vulnerability where an unauthorized user or an unprivileged regular user can compromise the security of the software by gaining privileges, reading sensitive information, or executing commands."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "CWE-284",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-12-30T00:00:00.000Z",
        "orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
        "shortName": "nvidia"
      },
      "references": [
        {
          "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
    "assignerShortName": "nvidia",
    "cveId": "CVE-2022-34672",
    "datePublished": "2022-12-30T00:00:00.000Z",
    "dateReserved": "2022-06-27T00:00:00.000Z",
    "dateUpdated": "2025-04-11T15:42:09.845Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-34673 (GCVE-0-2022-34673)

Vulnerability from cvelistv5 – Published: 2022-12-30 00:00 – Updated: 2025-04-11 16:08

Summary

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lead to denial of service, information disclosure, or data tampering.

Severity

4.4 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

CWE

CWE-190

Assigner

nvidia

References

2 references

URL	Tags
https://nvidia.custhelp.com/app/answers/detail/a_…
https://security.gentoo.org/glsa/202310-02	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
NVIDIA	NVIDIA GPU Display Driver for Linux	Affected: All versions prior to and including 14.2, 13.4, and 11.9, and all versions prior to the November 2022 release

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T09:15:15.694Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
          },
          {
            "name": "GLSA-202310-02",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202310-02"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-34673",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-11T16:08:31.648099Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-11T16:08:44.596Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "NVIDIA GPU Display Driver for Linux",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to and including 14.2, 13.4, and 11.9, and all versions prior to the November 2022 release"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lead to denial of service, information disclosure, or data tampering."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "CWE-190",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-03T14:06:59.928Z",
        "orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
        "shortName": "nvidia"
      },
      "references": [
        {
          "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
        },
        {
          "name": "GLSA-202310-02",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202310-02"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
    "assignerShortName": "nvidia",
    "cveId": "CVE-2022-34673",
    "datePublished": "2022-12-30T00:00:00.000Z",
    "dateReserved": "2022-06-27T00:00:00.000Z",
    "dateUpdated": "2025-04-11T16:08:44.596Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-34674 (GCVE-0-2022-34674)

Vulnerability from cvelistv5 – Published: 2022-12-30 00:00 – Updated: 2025-04-11 16:08

Summary

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where a helper function maps more physical pages than were requested, which may lead to undefined behavior or an information leak.

Severity

6.8 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

CWE

CWE-200

Assigner

nvidia

References

3 references

URL	Tags
https://nvidia.custhelp.com/app/answers/detail/a_…
https://lists.debian.org/debian-lts-announce/2023…	mailing-list
https://security.gentoo.org/glsa/202310-02	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
NVIDIA	vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager)	Affected: All versions prior to and including 14.2, 13.4, and 11.9, and all versions prior to the November 2022 release

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T09:15:15.865Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
          },
          {
            "name": "[debian-lts-announce] 20230511 [SECURITY] [DLA 3418-1] nvidia-graphics-drivers-legacy-390xx security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html"
          },
          {
            "name": "GLSA-202310-02",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202310-02"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-34674",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-11T16:07:48.379708Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-11T16:08:05.401Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager)",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to and including 14.2, 13.4, and 11.9, and all versions prior to the November 2022 release"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where a helper function maps more physical pages than were requested, which may lead to undefined behavior or an information leak."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-03T14:07:06.046Z",
        "orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
        "shortName": "nvidia"
      },
      "references": [
        {
          "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
        },
        {
          "name": "[debian-lts-announce] 20230511 [SECURITY] [DLA 3418-1] nvidia-graphics-drivers-legacy-390xx security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html"
        },
        {
          "name": "GLSA-202310-02",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202310-02"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
    "assignerShortName": "nvidia",
    "cveId": "CVE-2022-34674",
    "datePublished": "2022-12-30T00:00:00.000Z",
    "dateReserved": "2022-06-27T00:00:00.000Z",
    "dateUpdated": "2025-04-11T16:08:05.401Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-34675 (GCVE-0-2022-34675)

Vulnerability from cvelistv5 – Published: 2022-12-30 00:00 – Updated: 2025-04-11 16:07

Summary

NVIDIA Display Driver for Linux contains a vulnerability in the Virtual GPU Manager, where it does not check the return value from a null-pointer dereference, which may lead to denial of service.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-476

Assigner

nvidia

References

2 references

URL	Tags
https://nvidia.custhelp.com/app/answers/detail/a_…
https://lists.debian.org/debian-lts-announce/2023…	mailing-list

Impacted products

1 product

Vendor	Product	Version
NVIDIA	vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (Virtual GPU Manager)	Affected: All versions prior to and including 14.2, 13.4, and 11.9, and all versions prior to the November 2022 release

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T09:15:15.825Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
          },
          {
            "name": "[debian-lts-announce] 20230511 [SECURITY] [DLA 3418-1] nvidia-graphics-drivers-legacy-390xx security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-34675",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-11T16:07:12.367882Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-11T16:07:23.103Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (Virtual GPU Manager)",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to and including 14.2, 13.4, and 11.9, and all versions prior to the November 2022 release"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "NVIDIA Display Driver for Linux contains a vulnerability in the Virtual GPU Manager, where it does not check the return value from a null-pointer dereference, which may lead to denial of service."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-11T00:00:00.000Z",
        "orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
        "shortName": "nvidia"
      },
      "references": [
        {
          "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
        },
        {
          "name": "[debian-lts-announce] 20230511 [SECURITY] [DLA 3418-1] nvidia-graphics-drivers-legacy-390xx security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
    "assignerShortName": "nvidia",
    "cveId": "CVE-2022-34675",
    "datePublished": "2022-12-30T00:00:00.000Z",
    "dateReserved": "2022-06-27T00:00:00.000Z",
    "dateUpdated": "2025-04-11T16:07:23.103Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-34676 (GCVE-0-2022-34676)

Vulnerability from cvelistv5 – Published: 2022-12-30 00:00 – Updated: 2025-04-11 16:03

Summary

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read may lead to denial of service, information disclosure, or data tampering.

Severity

7.1 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

CWE

CWE-197

Assigner

nvidia

References

2 references

URL	Tags
https://nvidia.custhelp.com/app/answers/detail/a_…
https://security.gentoo.org/glsa/202310-02	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
NVIDIA	vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager)	Affected: All versions prior to and including 14.2, 13.4, and 11.9, and all versions prior to the November 2022 release

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T09:15:15.858Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
          },
          {
            "name": "GLSA-202310-02",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202310-02"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-34676",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-11T16:03:33.987731Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-11T16:03:47.775Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager)",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to and including 14.2, 13.4, and 11.9, and all versions prior to the November 2022 release"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read may lead to denial of service, information disclosure, or data tampering."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-197",
              "description": "CWE-197",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-03T14:06:58.533Z",
        "orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
        "shortName": "nvidia"
      },
      "references": [
        {
          "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
        },
        {
          "name": "GLSA-202310-02",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202310-02"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
    "assignerShortName": "nvidia",
    "cveId": "CVE-2022-34676",
    "datePublished": "2022-12-30T00:00:00.000Z",
    "dateReserved": "2022-06-27T00:00:00.000Z",
    "dateUpdated": "2025-04-11T16:03:47.775Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-34677 (GCVE-0-2022-34677)

Vulnerability from cvelistv5 – Published: 2022-12-30 00:00 – Updated: 2025-04-11 16:01

Summary

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause an integer to be truncated, which may lead to denial of service or data tampering.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-125

Assigner

nvidia

References

3 references

URL	Tags
https://nvidia.custhelp.com/app/answers/detail/a_…
https://lists.debian.org/debian-lts-announce/2023…	mailing-list
https://security.gentoo.org/glsa/202310-02	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
NVIDIA	vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager)	Affected: All versions prior to and including 14.2, 13.4, and 11.9, and all versions prior to the November 2022 release

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T09:15:15.722Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
          },
          {
            "name": "[debian-lts-announce] 20230511 [SECURITY] [DLA 3418-1] nvidia-graphics-drivers-legacy-390xx security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html"
          },
          {
            "name": "GLSA-202310-02",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202310-02"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-34677",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-11T16:00:45.603664Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-11T16:01:00.823Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager)",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to and including 14.2, 13.4, and 11.9, and all versions prior to the November 2022 release"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause an integer to be truncated, which may lead to denial of service or data tampering."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-03T14:06:41.944Z",
        "orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
        "shortName": "nvidia"
      },
      "references": [
        {
          "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
        },
        {
          "name": "[debian-lts-announce] 20230511 [SECURITY] [DLA 3418-1] nvidia-graphics-drivers-legacy-390xx security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html"
        },
        {
          "name": "GLSA-202310-02",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202310-02"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
    "assignerShortName": "nvidia",
    "cveId": "CVE-2022-34677",
    "datePublished": "2022-12-30T00:00:00.000Z",
    "dateReserved": "2022-06-27T00:00:00.000Z",
    "dateUpdated": "2025-04-11T16:01:00.823Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-34678 (GCVE-0-2022-34678)

Vulnerability from cvelistv5 – Published: 2022-12-30 00:00 – Updated: 2025-04-10 19:02

Summary

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause a null-pointer dereference, which may lead to denial of service.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CWE

CWE-476

Assigner

nvidia

References

2 references

URL	Tags
https://nvidia.custhelp.com/app/answers/detail/a_…
https://security.gentoo.org/glsa/202310-02	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
NVIDIA	vGPU software (guest driver) - Windows, Linux and vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager)	Affected: All versions prior to and including 14.2, 13.4, and 11.9, and all versions prior to the November 2022 release

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T09:15:15.704Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
          },
          {
            "name": "GLSA-202310-02",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202310-02"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-34678",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-10T19:02:02.330789Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-476",
                "description": "CWE-476 NULL Pointer Dereference",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-10T19:02:16.613Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vGPU software (guest driver) - Windows, Linux and vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager)",
          "vendor": "NVIDIA",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to and including 14.2, 13.4, and 11.9, and all versions prior to the November 2022 release"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause a null-pointer dereference, which may lead to denial of service."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-03T14:07:14.864Z",
        "orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
        "shortName": "nvidia"
      },
      "references": [
        {
          "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
        },
        {
          "name": "GLSA-202310-02",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202310-02"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
    "assignerShortName": "nvidia",
    "cveId": "CVE-2022-34678",
    "datePublished": "2022-12-30T00:00:00.000Z",
    "dateReserved": "2022-06-27T00:00:00.000Z",
    "dateUpdated": "2025-04-10T19:02:16.613Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

WID-SEC-W-2022-2205

CVE-2022-34669 (GCVE-0-2022-34669)

CVE-2022-34670 (GCVE-0-2022-34670)

CVE-2022-34671 (GCVE-0-2022-34671)

CVE-2022-34672 (GCVE-0-2022-34672)

CVE-2022-34673 (GCVE-0-2022-34673)

CVE-2022-34674 (GCVE-0-2022-34674)

CVE-2022-34675 (GCVE-0-2022-34675)

CVE-2022-34676 (GCVE-0-2022-34676)

CVE-2022-34677 (GCVE-0-2022-34677)

CVE-2022-34678 (GCVE-0-2022-34678)

Tags

Sightings

Nomenclature