CVE-2015-5053

EUVD-2015-5070
The host memory mapping path feature in the NVIDIA GPU graphics driver R346 before 346.87 and R352 before 352.41 for Linux and R352 before 352.46 for GRID vGPU and vSGA does not properly restrict access to third-party device IO memory, which allows attackers to gain privileges, cause a denial of service (resource consumption), or possibly have unspecified other impact via unknown vectors related to the follow_pfn kernel-mode API call.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 66%
Affected Products (NVD)
VendorProductVersion
nvidiagpu_driver
346.16
nvidiagpu_driver
346.22
nvidiagpu_driver
346.35
nvidiagpu_driver
346.47
nvidiagpu_driver
346.59
nvidiagpu_driver
346.72
nvidiagpu_driver
346.82
nvidiagpu_driver
352.09
nvidiagpu_driver
352.21
nvidiagpu_driver
352.30
nvidiagpu_driver
352.41
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
nvidia-graphics-drivers
bookworm/non-free-firmware
535.183.01-1~deb12u1
fixed
bullseye/non-free
470.256.02-2
fixed
jessie
not-affected
sid/non-free-firmware
535.183.06-2
fixed
trixie/non-free-firmware
535.183.06-2
fixed
wheezy
not-affected
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
nvidia-graphics-drivers
precise
not-affected
trusty
dne
vivid
dne
wily
dne
nvidia-graphics-drivers-173
precise
not-affected
trusty
dne
vivid
dne
wily
dne
nvidia-graphics-drivers-173-updates
precise
not-affected
trusty
dne
vivid
dne
wily
dne
nvidia-graphics-drivers-304
precise
not-affected
trusty
dne
vivid
not-affected
wily
not-affected
nvidia-graphics-drivers-304-updates
precise
not-affected
trusty
dne
vivid
not-affected
wily
not-affected
nvidia-graphics-drivers-310-updates
precise
dne
trusty
dne
vivid
not-affected
wily
not-affected
nvidia-graphics-drivers-319
precise
not-affected
trusty
dne
vivid
not-affected
wily
not-affected
nvidia-graphics-drivers-319-updates
precise
not-affected
trusty
dne
vivid
not-affected
wily
not-affected
nvidia-graphics-drivers-331
precise
not-affected
trusty
dne
vivid
not-affected
wily
not-affected
nvidia-graphics-drivers-331-updates
precise
not-affected
trusty
dne
vivid
not-affected
wily
not-affected
nvidia-graphics-drivers-340
precise
not-affected
trusty
dne
vivid
not-affected
wily
not-affected
nvidia-graphics-drivers-340-updates
precise
not-affected
trusty
dne
vivid
not-affected
wily
not-affected
nvidia-graphics-drivers-346
precise
dne
trusty
dne
vivid
not-affected
wily
dne
nvidia-graphics-drivers-346-updates
precise
dne
trusty
dne
vivid
not-affected
wily
dne
nvidia-graphics-drivers-352
precise
dne
trusty
dne
vivid
not-affected
wily
Fixed 352.63-0ubuntu0.15.10.1
released
nvidia-graphics-drivers-352-updates
precise
dne
trusty
dne
vivid
not-affected
wily
Fixed 352.63-0ubuntu0.15.10.1
released
nvidia-graphics-drivers-96
precise
not-affected
trusty
dne
vivid
dne
wily
dne
nvidia-graphics-drivers-96-updates
precise
not-affected
trusty
dne
vivid
dne
wily
dne
nvidia-graphics-drivers-experimental-304
precise
not-affected
trusty
dne
vivid
dne
wily
dne
nvidia-graphics-drivers-experimental-310
precise
not-affected
trusty
dne
vivid
dne
wily
dne
nvidia-graphics-drivers-tegra
precise
not-affected
trusty
dne
vivid
dne
wily
dne
nvidia-graphics-drivers-updates
precise
not-affected
trusty
dne
vivid
dne
wily
dne
Common Weakness Enumeration
References
http://nvidia.custhelp.com/app/answers/detail/a_id/3802
http://nvidia.custhelp.com/app/answers/detail/a_id/3802