Nvidia Vulnérabilités

Chronologie

Taper

Produit

NVIDIA GPU Display Driver110
NVIDIA Windows GPU Display Driver64
NVIDIA Virtual GPU Manager38
NVIDIA Jetson28
NVIDIA GeForce Experience27

Contre-mesures

Official Fix299
Temporary Fix0
Workaround0
Unavailable1
Not Defined201

Exploitabilité

High1
Functional0
Proof-of-Concept26
Unproven4
Not Defined470

Vecteur d'accès

Not Defined0
Physical9
Local275
Adjacent19
Network198

Authentification

Not Defined0
High69
Low377
None55

Interaction de l'utilisateur

Not Defined0
Required20
None481

C3BM Index

CVSSv3 Base

≤10
≤20
≤37
≤419
≤550
≤684
≤7194
≤8100
≤938
≤109

CVSSv3 Temp

≤10
≤20
≤38
≤420
≤554
≤698
≤7193
≤888
≤933
≤107

VulDB

≤10
≤21
≤313
≤456
≤536
≤6157
≤7108
≤878
≤942
≤1010

NVD

≤10
≤20
≤33
≤43
≤510
≤639
≤729
≤8168
≤925
≤105

CNA

≤10
≤23
≤30
≤44
≤519
≤638
≤733
≤859
≤915
≤104

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k130
<2k218
<5k153
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k426
<2k42
<5k33
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter le volume du marché

🔴 CTI Activités

Affected Products (91): 9400M driver (1), A100 (1), ADSP (1), BMC (15), Binary Graphics Driver (1), CUDA Toolkit (7), CUDA Toolkit SDK (5), ConnectX-5 (3), ConnectX-6 (3), ConnectX6-DX (3), Control Panel (1), DCGM (3), DGX (2), DGX-1 (8), DGX-1 BMC (3), DGX-1 SBIOS (2), DGX-2 (5), DGX-2 SBIOS (2), DGX A100 (14), DGX A800 (2), DGX Station (1), Data Plane Development Kit (1), Display Driver Service (1), Driver (1), Flare (1), GP100 (1), GPU (1), GPU Display Driver (111), GPU Driver (15), GPU Driver R346 (1), GPU Graphics Driver (8), GPU Manager (7), GPUModeSwitch Tool (1), GPU Software (13), GPU software (1), GeForce Experience (27), GeForce Experience Installer (1), GeForce NOW (1), GeForce Now (2), Geforce 310 driver (1), Graphics Driver (27), Graphics Drivers (10), Installer (1), JetPack SDK (1), Jetson (28), Jetson AGX Xavier (11), Jetson Linux Driver Package (6), Jetson Nano (8), Jetson TX1 (8), Jetson TX1 L4T (1), Jetson TX2 (11), Jetson TX2 NX (1), Jetson Xavier NX (10), KernelJetson AGX Xavier (1), Kernel Mode Driver (1), License System (1), Linux (1), Linux GPU Display Driver (2), Linux for Tegra (1), Maxwell (8), NVCaffe (1), NVFLARE (2), NVFlare (1), NVFlash (1), NVUFlash Tool (1), NeMo (1), Omniverse Cache (1), Omniverse Kit (1), Omniverse Launcher (1), Omniverse Nucleus (1), Pascal (6), Shield TV (9), Shield TV Experience (5), Stereoscopic 3D driver (2), Tegra (1), Tegra Kernel (1), Tegra Kernel Driver (1), Tegra Mobile Processor (1), Tegra TX2 (7), Tegra X1 (8), Tegra X1+ (8), Trusted OS (1), Turing (5), Unix Graphic Driver (1), Vibrante Linux (1), Video Driver (4), Virtual GPU Manager (38), Volta (6), Windows GPU Display Driver (64), Xavier (6), nView (1)

Link to Vendor Website: https://www.nvidia.com/

PubliéBaseTempVulnérabilitéProdExpConCTIEPSSCVE
04/07/20237.87.8NVIDIA Virtual GPU Manager vGPU software elévation de privilègesInconnueNot DefinedNot Defined0.070.00043CVE-2023-25517
04/07/20233.03.0NVIDIA CUDA Toolkit nvdisasm dénie de serviceInconnueNot DefinedNot Defined0.000.00044CVE-2023-25523
04/07/20237.27.2NVIDIA DGX A100/DGX A800 SBIOS elévation de privilègesInconnueNot DefinedNot Defined0.000.00043CVE-2023-25522
04/07/20237.27.2NVIDIA DGX A100/DGX A800 SBIOS elévation de privilègesInconnueNot DefinedNot Defined0.050.00042CVE-2023-25521
04/07/20237.17.1NVIDIA GPU Display Driver Kernel Mode Layer buffer overflowHardware Driver SoftwareNot DefinedNot Defined0.000.00043CVE-2023-25516
24/06/20236.86.8NVIDIA Jetson CBoot Local Privilege EscalationInconnueNot DefinedNot Defined0.000.00055CVE-2023-25518
24/06/20237.07.0NVIDIA Jetson CBoot Local Privilege EscalationInconnueNot DefinedNot Defined0.080.00055CVE-2023-25515
24/06/20234.84.8NVIDIA Jetson Linux Driver Package Setting dénie de serviceHardware Driver SoftwareNot DefinedNot Defined0.000.00042CVE-2023-25520
22/04/20236.86.8NVIDIA DGX-1 SBIOS Bds buffer overflowInconnueNot DefinedNot Defined0.050.00042CVE-2023-25509
22/04/20233.33.3NVIDIA CUDA Toolkit SDK dénie de serviceInconnueNot DefinedNot Defined0.030.00042CVE-2023-25510
22/04/20236.16.1NVIDIA DGX-2 SBIOS ServerSetup NVRAM elévation de privilègesInconnueNot DefinedNot Defined0.070.00043CVE-2023-0207
22/04/20235.75.7NVIDIA ConnectX-5/ConnectX-6/ConnectX6-DX NIC Firmware dénie de serviceInconnueNot DefinedNot Defined0.030.00044CVE-2023-0205
22/04/20236.66.6NVIDIA ConnectX-5/ConnectX-6/ConnectX6-DX NIC Firmware dénie de serviceInconnueNot DefinedNot Defined0.030.00044CVE-2023-0204
22/04/20235.75.7NVIDIA ConnectX-5/ConnectX-6/ConnectX6-DX NIC Firmware dénie de serviceInconnueNot DefinedNot Defined0.000.00044CVE-2023-0203
22/04/20236.26.2NVIDIA DGX-1 BMC IPMI directory traversalInconnueNot DefinedNot Defined0.000.00046CVE-2023-25508
22/04/20237.27.2NVIDIA DGX A100 NVME SMM API buffer overflowInconnueNot DefinedNot Defined0.000.00043CVE-2023-0206
22/04/20236.96.9NVIDIA DGX A100 SMM API buffer overflowInconnueNot DefinedNot Defined0.030.00043CVE-2023-0202
22/04/20233.13.1NVIDIA CUDA Toolkit cuobjdump dénie de serviceInconnueNot DefinedNot Defined0.030.00043CVE-2023-25511
22/04/20237.77.7NVIDIA DGX-1 BMC SPX REST API elévation de privilègesInconnueNot DefinedNot Defined0.040.00056CVE-2023-25507
22/04/20237.47.4NVIDIA DGX-1 Ofbd Local Privilege EscalationInconnueNot DefinedNot Defined0.030.00060CVE-2023-25506
22/04/20237.87.8NVIDIA DGX-1 BMC IPMI buffer overflowInconnueNot DefinedNot Defined0.000.00042CVE-2023-25505
22/04/20237.67.6NVIDIA DGX-1 SBIOS Uncore PEI Module authentification faibleInconnueNot DefinedNot Defined0.030.00045CVE-2023-0209
22/04/20237.07.0NVIDIA DGX-2 OFBD Local Privilege EscalationInconnueNot DefinedNot Defined0.030.00060CVE-2023-0200
22/04/20235.75.7NVIDIA GPU Display Driver Kernel Mode Layer buffer overflowHardware Driver SoftwareNot DefinedNot Defined0.060.00043CVE-2023-0199
22/04/20235.55.5NVIDIA GPU Display Driver Kernel Mode Layer dénie de serviceHardware Driver SoftwareNot DefinedNot Defined0.000.00043CVE-2023-0190

476 plus d'entrées ne sont pas affichées

Do you want to use VulDB in your project?

Use the official API to access entries easily!