2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2022-34671" ,
"sourceIdentifier" : "psirt@nvidia.com" ,
"published" : "2022-12-30T23:15:09.430" ,
2025-02-13 19:04:13 +00:00
"lastModified" : "2025-02-13T17:15:41.260" ,
2023-07-04 02:00:31 +00:00
"vulnStatus" : "Modified" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
2025-02-13 19:04:13 +00:00
"value" : "NVIDIA GPU Display Driver for Windows contains a vulnerability in the user-mode layer, where an unprivileged user can cause an out-of-bounds write, which may lead to code execution, information disclosure, and denial of service."
2024-04-04 08:46:00 +00:00
} ,
{
"lang" : "es" ,
"value" : "NVIDIA GPU Display Driver para Windows contiene una vulnerabilidad en la capa de modo de usuario, donde un usuario sin privilegios puede provocar una escritura fuera de los l\u00edmites, lo que puede provocar la ejecuci\u00f3n de c\u00f3digo, la divulgaci\u00f3n de informaci\u00f3n y la Denegaci\u00f3n de Servicio (DoS)."
2023-04-24 12:24:31 +02:00
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
2024-12-08 03:06:42 +00:00
"source" : "psirt@nvidia.com" ,
"type" : "Secondary" ,
2023-04-24 12:24:31 +02:00
"cvssData" : {
"version" : "3.1" ,
2024-12-08 03:06:42 +00:00
"vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" ,
"baseScore" : 8.5 ,
"baseSeverity" : "HIGH" ,
2023-04-24 12:24:31 +02:00
"attackVector" : "NETWORK" ,
2024-12-08 03:06:42 +00:00
"attackComplexity" : "HIGH" ,
2023-04-24 12:24:31 +02:00
"privilegesRequired" : "LOW" ,
"userInteraction" : "NONE" ,
2024-12-08 03:06:42 +00:00
"scope" : "CHANGED" ,
2023-04-24 12:24:31 +02:00
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "HIGH"
2023-04-24 12:24:31 +02:00
} ,
2024-12-08 03:06:42 +00:00
"exploitabilityScore" : 1.8 ,
"impactScore" : 6.0
2023-04-24 12:24:31 +02:00
} ,
{
2024-12-08 03:06:42 +00:00
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
2023-04-24 12:24:31 +02:00
"cvssData" : {
"version" : "3.1" ,
2024-12-08 03:06:42 +00:00
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" ,
"baseScore" : 8.8 ,
"baseSeverity" : "HIGH" ,
2023-04-24 12:24:31 +02:00
"attackVector" : "NETWORK" ,
2024-12-08 03:06:42 +00:00
"attackComplexity" : "LOW" ,
2023-04-24 12:24:31 +02:00
"privilegesRequired" : "LOW" ,
"userInteraction" : "NONE" ,
2024-12-08 03:06:42 +00:00
"scope" : "UNCHANGED" ,
2023-04-24 12:24:31 +02:00
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "HIGH"
2023-04-24 12:24:31 +02:00
} ,
2024-12-08 03:06:42 +00:00
"exploitabilityScore" : 2.8 ,
"impactScore" : 5.9
2023-04-24 12:24:31 +02:00
}
]
} ,
"weaknesses" : [
{
2024-12-08 03:06:42 +00:00
"source" : "psirt@nvidia.com" ,
"type" : "Secondary" ,
2023-04-24 12:24:31 +02:00
"description" : [
{
"lang" : "en" ,
"value" : "CWE-787"
}
]
} ,
{
2024-12-08 03:06:42 +00:00
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
2023-04-24 12:24:31 +02:00
"description" : [
{
"lang" : "en" ,
"value" : "CWE-787"
}
]
}
] ,
"configurations" : [
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*" ,
"versionStartIncluding" : "470" ,
"versionEndExcluding" : "474.14" ,
"matchCriteriaId" : "B19EABAD-2FA5-4C85-AF5A-86A92934E21F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*" ,
"versionStartIncluding" : "510" ,
"versionEndExcluding" : "514.08" ,
"matchCriteriaId" : "92FDDB0C-1F5B-4559-8ACA-F7D889379384"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*" ,
"versionStartIncluding" : "515" ,
"versionEndExcluding" : "517.88" ,
"matchCriteriaId" : "7CD854B9-D2EA-4797-8CD6-5CE7BF431EDC"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*" ,
"versionStartIncluding" : "525" ,
"versionEndExcluding" : "527.27" ,
"matchCriteriaId" : "EFC7E8ED-C6D0-4ADB-B914-850B86E85DC6"
}
]
2024-12-08 03:06:42 +00:00
} ,
2023-04-24 12:24:31 +02:00
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
2024-12-08 03:06:42 +00:00
"criteria" : "cpe:2.3:a:nvidia:nvs:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "333646B0-AAD5-4DD7-8940-6334D0A8E77C"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:a:nvidia:quadro:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A1DB9FB5-E115-4E96-98F8-3FAFAC120E98"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:a:nvidia:rtx:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "08C63EA1-8719-4F5C-922A-C77ED4CEF7C7"
2023-04-24 12:24:31 +02:00
}
]
2024-12-08 03:06:42 +00:00
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
2023-04-24 12:24:31 +02:00
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*" ,
"versionStartIncluding" : "450" ,
"versionEndExcluding" : "454.02" ,
"matchCriteriaId" : "1B6ED659-FE16-4240-AB72-F33BCEB67616"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*" ,
"versionStartIncluding" : "470" ,
"versionEndExcluding" : "474.14" ,
"matchCriteriaId" : "B19EABAD-2FA5-4C85-AF5A-86A92934E21F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*" ,
"versionStartIncluding" : "510" ,
"versionEndExcluding" : "514.08" ,
"matchCriteriaId" : "92FDDB0C-1F5B-4559-8ACA-F7D889379384"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*" ,
"versionStartIncluding" : "515" ,
"versionEndIncluding" : "517.88" ,
"matchCriteriaId" : "E7C44AD7-7797-4CB6-B6B7-59176B72E417"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*" ,
"versionStartIncluding" : "525" ,
"versionEndExcluding" : "527.41" ,
"matchCriteriaId" : "E07CE5FB-5FE4-449B-9A8C-FE3836F355D2"
}
]
2024-12-08 03:06:42 +00:00
} ,
2023-04-24 12:24:31 +02:00
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
2024-12-08 03:06:42 +00:00
"criteria" : "cpe:2.3:a:nvidia:tesla:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D135086F-CA5E-4242-ACBA-C3AC82F4BE03"
2023-04-24 12:24:31 +02:00
}
]
2024-12-08 03:06:42 +00:00
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
2023-04-24 12:24:31 +02:00
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*" ,
"versionStartIncluding" : "525" ,
"versionEndExcluding" : "526.98" ,
"matchCriteriaId" : "FF62D74B-A5A4-4A81-9D00-DDA6A8A1F05D"
}
]
2024-12-08 03:06:42 +00:00
} ,
2023-04-24 12:24:31 +02:00
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
2024-12-08 03:06:42 +00:00
"criteria" : "cpe:2.3:a:nvidia:studio:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C1ED5DE2-7677-4F38-8177-3BF0B3D03A09"
2023-04-24 12:24:31 +02:00
}
]
2024-12-08 03:06:42 +00:00
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
2023-04-24 12:24:31 +02:00
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*" ,
"versionStartIncluding" : "470" ,
"versionEndExcluding" : "474.14" ,
"matchCriteriaId" : "B19EABAD-2FA5-4C85-AF5A-86A92934E21F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*" ,
"versionStartIncluding" : "525" ,
"versionEndExcluding" : "526.98" ,
"matchCriteriaId" : "FF62D74B-A5A4-4A81-9D00-DDA6A8A1F05D"
}
]
2024-12-08 03:06:42 +00:00
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:a:nvidia:geforce:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "24DE5CC2-3787-4605-8EFA-77590E36E960"
}
]
2023-04-24 12:24:31 +02:00
}
]
}
] ,
"references" : [
{
"url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5415" ,
"source" : "psirt@nvidia.com" ,
"tags" : [
"Vendor Advisory"
]
2023-07-04 02:00:31 +00:00
} ,
{
"url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5468" ,
"source" : "psirt@nvidia.com"
2023-08-21 23:55:29 +00:00
} ,
{
"url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1719" ,
"source" : "psirt@nvidia.com"
} ,
{
"url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1720" ,
"source" : "psirt@nvidia.com"
} ,
{
"url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1721" ,
"source" : "psirt@nvidia.com"
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5415" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5468" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1719" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1720" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1721" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
2023-04-24 12:24:31 +02:00
}
]
}