cnvd - cnvd-2015-07802

CNVD-2015-07802

Vulnerability from cnvd - Published: 2015-11-27

Title

多款NVIDIA GPU显卡驱动整数溢出漏洞

Description

NVIDIA GPU graphics driver R340、R352和R358 on Windows和R304、R340和R358 on Linux都是美国英伟达（NVIDIA）公司的图形处理器(GPU)驱动程序。多款NVIDIA GPU显卡驱动的kernel mode驱动程序中存在整数溢出漏洞，该漏洞源于程序未能正确验证用户模式下的输入。本地攻击者可利用该漏洞获取敏感信息，造成拒绝服务（崩溃），或获取权限。

Severity

中

Patch Name

多款NVIDIA GPU显卡驱动整数溢出漏洞的补丁

Patch Description

Formal description

目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： http://nvidia.custhelp.com/app/answers/detail/a_id/3808/kw/security

Reference

http://securitytracker.com/id/1034176 http://ubuntu.com/usn/usn-2814-1 http://nvidia.custhelp.com/app/answers/detail/a_id/3808/kw/security

Impacted products

Name
['NVIDIA GPU graphics driver R340 for Windows <341.92', 'NVIDIA GPU graphics driver R352 for Windows <354.35', 'NVIDIA GPU graphics driver R358 for Windows <358.87', 'NVIDIA GPU graphics driver R304 for Linux <304.131', 'NVIDIA GPU graphics driver R340 for Linux <340.96', 'NVIDIA GPU graphics driver R358 for Linux <358.16']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2015-7869"
    }
  },
  "description": "NVIDIA GPU graphics driver R340\u3001R352\u548cR358 on Windows\u548cR304\u3001R340\u548cR358 on Linux\u90fd\u662f\u7f8e\u56fd\u82f1\u4f1f\u8fbe\uff08NVIDIA\uff09\u516c\u53f8\u7684\u56fe\u5f62\u5904\u7406\u5668(GPU)\u9a71\u52a8\u7a0b\u5e8f\u3002\r\n\r\n\u591a\u6b3eNVIDIA GPU\u663e\u5361\u9a71\u52a8\u7684kernel mode\u9a71\u52a8\u7a0b\u5e8f\u4e2d\u5b58\u5728\u6574\u6570\u6ea2\u51fa\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u9a8c\u8bc1\u7528\u6237\u6a21\u5f0f\u4e0b\u7684\u8f93\u5165\u3002\u672c\u5730\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u83b7\u53d6\u654f\u611f\u4fe1\u606f\uff0c\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08\u5d29\u6e83\uff09\uff0c\u6216\u83b7\u53d6\u6743\u9650\u3002",
  "discovererName": "NVIDIA",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttp://nvidia.custhelp.com/app/answers/detail/a_id/3808/kw/security",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-07802",
  "openTime": "2015-11-27",
  "patchDescription": "NVIDIA GPU graphics driver R340\u3001R352\u548cR358 on Windows\u548cR304\u3001R340\u548cR358 on Linux\u90fd\u662f\u7f8e\u56fd\u82f1\u4f1f\u8fbe\uff08NVIDIA\uff09\u516c\u53f8\u7684\u56fe\u5f62\u5904\u7406\u5668(GPU)\u9a71\u52a8\u7a0b\u5e8f\u3002\r\n\r\n\u591a\u6b3eNVIDIA GPU\u663e\u5361\u9a71\u52a8\u7684kernel mode\u9a71\u52a8\u7a0b\u5e8f\u4e2d\u5b58\u5728\u6574\u6570\u6ea2\u51fa\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u9a8c\u8bc1\u7528\u6237\u6a21\u5f0f\u4e0b\u7684\u8f93\u5165\u3002\u672c\u5730\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u83b7\u53d6\u654f\u611f\u4fe1\u606f\uff0c\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08\u5d29\u6e83\uff09\uff0c\u6216\u83b7\u53d6\u6743\u9650\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "\u591a\u6b3eNVIDIA GPU\u663e\u5361\u9a71\u52a8\u6574\u6570\u6ea2\u51fa\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "NVIDIA GPU graphics driver R340 for Windows \u003c341.92",
      "NVIDIA GPU graphics driver R352 for Windows \u003c354.35",
      "NVIDIA GPU graphics driver R358 for Windows \u003c358.87",
      "NVIDIA GPU graphics driver R304 for Linux \u003c304.131",
      "NVIDIA GPU graphics driver R340 for Linux \u003c340.96",
      "NVIDIA GPU graphics driver R358 for Linux \u003c358.16"
    ]
  },
  "referenceLink": "http://securitytracker.com/id/1034176\r\nhttp://ubuntu.com/usn/usn-2814-1\r\nhttp://nvidia.custhelp.com/app/answers/detail/a_id/3808/kw/security",
  "serverity": "\u4e2d",
  "submitTime": "2015-11-26",
  "title": "\u591a\u6b3eNVIDIA GPU\u663e\u5361\u9a71\u52a8\u6574\u6570\u6ea2\u51fa\u6f0f\u6d1e"
}

CVE-2015-7869 (GCVE-0-2015-7869)

Vulnerability from cvelistv5 – Published: 2015-11-24 20:00 – Updated: 2024-08-06 08:06

Summary

Multiple integer overflows in the kernel mode driver for the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows and R304 before 304.131, R340 before 340.96, R352 before 352.63, and R358 before 358.16 on Linux allow local users to obtain sensitive information, cause a denial of service (crash), or possibly gain privileges via unknown vectors, which trigger uninitialized or out of bounds memory access. NOTE: this identifier has been SPLIT per ADT2 and ADT3 due to different vulnerability type and affected versions. See CVE-2015-8328 for the vulnerability in the NVAPI support layer in NVIDIA drivers for Windows.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://securitytracker.com/id/1034176	vdb-entryx_refsource_SECTRACK
	https://h20565.www2.hp.com/portal/site/hpsc/publi…	vendor-advisoryx_refsource_HP
	http://nvidia.custhelp.com/app/answers/detail/a_i…	x_refsource_CONFIRM
	http://ubuntu.com/usn/usn-2814-1	vendor-advisoryx_refsource_UBUNTU

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T08:06:30.242Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1034176",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id/1034176"
          },
          {
            "name": "HPSBHF03545",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "https://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04971867"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/3808/kw/security"
          },
          {
            "name": "USN-2814-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-2814-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-11-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple integer overflows in the kernel mode driver for the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows and R304 before 304.131, R340 before 340.96, R352 before 352.63, and R358 before 358.16 on Linux allow local users to obtain sensitive information, cause a denial of service (crash), or possibly gain privileges via unknown vectors, which trigger uninitialized or out of bounds memory access.  NOTE: this identifier has been SPLIT per ADT2 and ADT3 due to different vulnerability type and affected versions. See CVE-2015-8328 for the vulnerability in the NVAPI support layer in NVIDIA drivers for Windows."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-08-12T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1034176",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id/1034176"
        },
        {
          "name": "HPSBHF03545",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "https://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04971867"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/3808/kw/security"
        },
        {
          "name": "USN-2814-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-2814-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-7869",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple integer overflows in the kernel mode driver for the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows and R304 before 304.131, R340 before 340.96, R352 before 352.63, and R358 before 358.16 on Linux allow local users to obtain sensitive information, cause a denial of service (crash), or possibly gain privileges via unknown vectors, which trigger uninitialized or out of bounds memory access.  NOTE: this identifier has been SPLIT per ADT2 and ADT3 due to different vulnerability type and affected versions. See CVE-2015-8328 for the vulnerability in the NVAPI support layer in NVIDIA drivers for Windows."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1034176",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id/1034176"
            },
            {
              "name": "HPSBHF03545",
              "refsource": "HP",
              "url": "https://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04971867"
            },
            {
              "name": "http://nvidia.custhelp.com/app/answers/detail/a_id/3808/kw/security",
              "refsource": "CONFIRM",
              "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/3808/kw/security"
            },
            {
              "name": "USN-2814-1",
              "refsource": "UBUNTU",
              "url": "http://ubuntu.com/usn/usn-2814-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-7869",
    "datePublished": "2015-11-24T20:00:00",
    "dateReserved": "2015-10-19T00:00:00",
    "dateUpdated": "2024-08-06T08:06:30.242Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2015-07802

CVE-2015-7869 (GCVE-0-2015-7869)

Tags

Sightings

Nomenclature