NVIDIA Windows GPU Display Driver 34x.x < 342.00 / 367.x < 369.73 / 367.x < 369.71 (GRID) / 375.x < 375.63 Multiple Vulnerabilities

This script is Copyright (C) 2016-2017 Tenable Network Security, Inc.


Synopsis :

A display driver installed on the remote Windows host is affected by
multiple vulnerabilities.

Description :

The version of the NVIDIA GPU display driver installed on the remote
Windows host is 34x.x prior to 342.00, 367.x prior to 369.73, 367.x
prior to 369.71 (GRID), or 375.x prior to 375.63. It is, therefore,
affected by multiple vulnerabilities :

- Multiple privilege escalation vulnerabilities exist in
the kernel mode layer (nvlddmkm.sys) handler for
DxgDdiEscape due to a NULL pointer dereference flaw. A
local attacker can exploit this to cause a denial of
service condition or an escalation of privileges.
(CVE-2016-8813, CVE-2016-8814)

- Multiple privilege escalation vulnerabilities exist in
the kernel mode layer (nvlddmkm.sys) handler for
DxgDdiEscape due to improper validation of user-supplied
input used for the index to an array. A local attacker
can exploit this to cause a denial of service condition
or an escalation of privileges. (CVE-2016-8815,
CVE-2016-8815)

- A privilege escalation vulnerability exists in the
kernel mode layer (nvlddmkm.sys) handler for
DxgDdiEscape due to improper validation of user-supplied
input to the memcpy() function. A local attacker can
exploit this to cause a buffer overflow, resulting in a
denial of service condition or an escalation of
privileges. (CVE-2016-8817)

- A privilege escalation vulnerability exists in the
kernel mode layer (nvlddmkm.sys) handler for
DxgDdiEscape due to improper validation of user-supplied
input. A local attacker can exploit this to cause a
denial of service condition or an escalation of
privileges. (CVE-2016-8818)

- A privilege escalation vulnerability exists in the
kernel mode layer (nvlddmkm.sys) handler for
DxgDdiEscape due to improper handling of objects in
memory. A local attacker can exploit this to cause a
denial of service condition or an escalation of
privileges. (CVE-2016-8819)

- A flaw exists in the kernel mode layer (nvlddmkm.sys)
handler for DxgDdiEscape due to a failure to check a
function return value. A local attacker can exploit this
to disclose sensitive information or cause a denial of
service condition. (CVE-2016-8820)

See also :

http://nvidia.custhelp.com/app/answers/detail/a_id/4257

Solution :

Upgrade the NVIDIA graphics driver to version 342.00 / 369.73 /
369.71 (GRID) / 375.63 or later.

Risk factor :

High / CVSS Base Score : 7.2
(CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C)
CVSS Temporal Score : 5.3
(CVSS2#E:U/RL:OF/RC:C)
Public Exploit Available : false

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now