NVIDIA Linux GPU Display Driver 375.x < 375.66 / 381.x < 381.22 Multiple Vulnerabilities

This script is Copyright (C) 2017 Tenable Network Security, Inc.


Synopsis :

A display driver installed on the remote Linux host is affected by
multiple vulnerabilities.

Description :

The version of the NVIDIA GPU display driver installed on the remote
Linux host is 375.x prior to 375.66 or 381.x prior to 381.22. It is,
therefore, affected by multiple vulnerabilities:

- A flaw exists in the kernel mode layer handler due to
improper validation of user-supplied input before it
is used in offset calculations. A local attacker can
exploit this to cause a denial of service condition or
potentially to gain elevated privileges. (CVE-2017-0350)

- A NULL pointer dereference flaw exists in the kernel
mode layer handler due to improper validation of
user-supplied input. A local attacker can exploit this
to cause a denial of service condition or potentially to
gain elevated privileges. (CVE-2017-0351)

- A flaw exists in the GPU firmware due to incorrect
access control that may allow CPU software to access
sensitive GPU control registers. A local attacker can
exploit this to gain elevated privileges.
(CVE-2017-0352)

See also :

http://nvidia.custhelp.com/app/answers/detail/a_id/4462

Solution :

Upgrade the NVIDIA graphics driver to version 375.66 / 381.22 or later
in accordance with the vendor advisory.

Risk factor :

High / CVSS Base Score : 7.2
(CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C)
CVSS Temporal Score : 5.3
(CVSS2#E:U/RL:OF/RC:C)
Public Exploit Available : false

Family: Misc.

Nessus Plugin ID: 100258 ()

Bugtraq ID: 98393
98475

CVE ID: CVE-2017-0350
CVE-2017-0351
CVE-2017-0352

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now