NVIDIA GPU Display Driver contains a vulnerability in the DirectX and OpenGL Usermode drivers where a specially crafted pixel shader can cause infinite recursion leading to denial of service.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - NVIDIA GPU Display Driver contains a vulnerability in the DirectX and OpenGL Usermode drivers where a     specially crafted pixel shader can cause infinite recursion leading to denial of service. (CVE-2018-6253)

Note that Nessus relies on the presence of the package as reported by the vendor.

The NVIDIA GPU display driver software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3662-1 advisory.

    It was discovered that the NVIDIA graphics drivers contained flaws in the kernel mode layer. A local     attacker could use these issues to cause a denial of service or potentially escalate their privileges on     the system.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a NULL pointer dereference may lead to denial of service or possible escalation of privileges. (CVE-2018-6247)

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape where the software uses a sequential operation to read or write a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer which may lead to denial of service or possible escalation of privileges. (CVE-2018-6248)

NVIDIA GPU Display Driver contains a vulnerability in kernel mode layer handler where a NULL pointer dereference may lead to denial of service or potential escalation of privileges. (CVE-2018-6249)

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a NULL pointer dereference occurs, which may lead to denial of service or possible escalation of privileges. (CVE-2018-6250)

NVIDIA Windows GPU Display Driver contains a vulnerability in the DirectX 10 Usermode driver, where a specially crafted pixel shader can cause writing to unallocated memory, leading to denial of service or potential code execution. (CVE-2018-6251)

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape where the software allows an actor access to restricted functionality that is unnecessary for production usage, and which may result in denial of service.
(CVE-2018-6252)

NVIDIA GPU Display Driver contains a vulnerability in the DirectX and OpenGL Usermode drivers where a specially crafted pixel shader can cause infinite recursion leading to denial of service. (CVE-2018-6253)

ID	Name	Product	Family	Type	Severity
249787	Linux Distros Unpatched Vulnerability : CVE-2018-6253	Nessus	Misc.	Local	medium
111107	NVIDIA Linux GPU Display Driver Multiple Vulnerabilities	Nessus	Windows	Local	high
111106	NVIDIA Linux GPU Display Driver Multiple Vulnerabilities	Nessus	Misc.	Local	high
110226	Ubuntu 14.04 LTS / 16.04 LTS : NVIDIA graphics drivers vulnerabilities (USN-3662-1)	Nessus	Ubuntu Local Security Checks	Local	high
108852	Amazon Linux AMI : nvidia (ALAS-2018-991)	Nessus	Amazon Linux Local Security Checks	Local	high

Detections

Analytics

CVE-2018-6253

medium

Tenable Plugins

medium

high

high

high

high