CVE-2017-0309 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	8.8 HIGH	LOCAL	LOW	LOW	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 12%

Affected Products (NVD)

Vendor	Product	Version
nvidia	gpu_driver	-

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

nvidia-graphics-drivers

bookworm/non-free-firmware	535.183.01-1~deb12u1 fixed
bullseye/non-free	470.256.02-2 fixed
sid/non-free-firmware	535.183.06-2 fixed
trixie/non-free-firmware	535.183.06-2 fixed
wheezy	no-dsa

nvidia-graphics-drivers-legacy-340xx

sid/non-free	340.108-23 fixed
wheezy	no-dsa

Ubuntu Releases

Ubuntu Product

Codename

nvidia-graphics-drivers

precise	not-affected
trusty	dne
xenial	dne
yakkety	dne

nvidia-graphics-drivers-173

precise	ignored
trusty	dne
xenial	dne
yakkety	dne

nvidia-graphics-drivers-173-updates

precise	ignored
trusty	dne
xenial	dne
yakkety	dne

nvidia-graphics-drivers-304

precise	Fixed 304.135-0ubuntu0.12.04.1 released
trusty	Fixed 304.135-0ubuntu0.14.04.1 released
xenial	Fixed 304.135-0ubuntu0.16.04.1 released
yakkety	Fixed 304.135-0ubuntu0.16.10.1 released

nvidia-graphics-drivers-304-updates

precise	not-affected
trusty	dne
xenial	not-affected
yakkety	not-affected

nvidia-graphics-drivers-310-updates

precise	dne
trusty	dne
xenial	dne
yakkety	dne

nvidia-graphics-drivers-319

precise	not-affected
trusty	dne
xenial	dne
yakkety	dne

nvidia-graphics-drivers-319-updates

precise	not-affected
trusty	dne
xenial	dne
yakkety	dne

nvidia-graphics-drivers-331

precise	not-affected
trusty	dne
xenial	dne
yakkety	dne

nvidia-graphics-drivers-331-updates

precise	not-affected
trusty	dne
xenial	dne
yakkety	dne

nvidia-graphics-drivers-340

precise	Fixed 340.102-0ubuntu0.12.04.1 released
trusty	Fixed 340.102-0ubuntu0.14.04.1 released
xenial	Fixed 340.102-0ubuntu0.16.04.1 released
yakkety	Fixed 340.102-0ubuntu0.16.10.1 released

nvidia-graphics-drivers-340-updates

precise	not-affected
trusty	dne
xenial	not-affected
yakkety	not-affected

nvidia-graphics-drivers-346

precise	dne
trusty	dne
xenial	dne
yakkety	dne

nvidia-graphics-drivers-346-updates

precise	dne
trusty	dne
xenial	dne
yakkety	dne

nvidia-graphics-drivers-352

precise	dne
trusty	dne
xenial	not-affected
yakkety	not-affected

nvidia-graphics-drivers-352-updates

precise	dne
trusty	dne
xenial	not-affected
yakkety	not-affected

nvidia-graphics-drivers-361

precise	dne
trusty	dne
xenial	not-affected
yakkety	not-affected

nvidia-graphics-drivers-367

precise	dne
trusty	dne
xenial	not-affected
yakkety	not-affected

nvidia-graphics-drivers-96

precise	ignored
trusty	dne
xenial	dne
yakkety	dne

nvidia-graphics-drivers-96-updates

precise	ignored
trusty	dne
xenial	dne
yakkety	dne

nvidia-graphics-drivers-experimental-304

precise	not-affected
trusty	dne
xenial	dne
yakkety	dne

nvidia-graphics-drivers-experimental-310

precise	not-affected
trusty	dne
xenial	dne
yakkety	dne

nvidia-graphics-drivers-tegra

precise	not-affected
trusty	dne
xenial	dne
yakkety	dne

nvidia-graphics-drivers-updates

precise	not-affected
trusty	dne
xenial	dne
yakkety	dne

Common Weakness Enumeration

CWE-190 - Integer Overflow or Wraparound
The software performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control.

References

http://nvidia.custhelp.com/app/answers/detail/a_id/4398