CVE-2017-0309 :: Enginsight Vulnerability Database

Severity

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Atk. Vector

LOCAL

Atk. Complexity

LOW

Priv. Required

LOW

Base Score

CVSS 3.x

EPSS Score

Percentile: 14%

Vendor	Product	Version
nvidia	gpu_driver	-

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

nvidia-graphics-drivers

bullseye/non-free	470.256.02-2 fixed
wheezy	no-dsa
bookworm/non-free-firmware	535.183.01-1~deb12u1 fixed
sid/non-free-firmware	535.183.06-2 fixed
trixie/non-free-firmware	535.183.06-2 fixed

nvidia-graphics-drivers-legacy-340xx

sid/non-free	340.108-23 fixed
wheezy	no-dsa

Ubuntu Releases

Ubuntu Product

Codename

nvidia-graphics-drivers

yakkety	dne
xenial	dne
trusty	dne
precise	not-affected

nvidia-graphics-drivers-173

yakkety	dne
xenial	dne
trusty	dne
precise	ignored

nvidia-graphics-drivers-173-updates

yakkety	dne
xenial	dne
trusty	dne
precise	ignored

nvidia-graphics-drivers-304

yakkety	Fixed 304.135-0ubuntu0.16.10.1 released
xenial	Fixed 304.135-0ubuntu0.16.04.1 released
trusty	Fixed 304.135-0ubuntu0.14.04.1 released
precise	Fixed 304.135-0ubuntu0.12.04.1 released

nvidia-graphics-drivers-304-updates

yakkety	not-affected
xenial	not-affected
trusty	dne
precise	not-affected

nvidia-graphics-drivers-310-updates

yakkety	dne
xenial	dne
trusty	dne
precise	dne

nvidia-graphics-drivers-319

yakkety	dne
xenial	dne
trusty	dne
precise	not-affected

nvidia-graphics-drivers-319-updates

yakkety	dne
xenial	dne
trusty	dne
precise	not-affected

nvidia-graphics-drivers-331

yakkety	dne
xenial	dne
trusty	dne
precise	not-affected

nvidia-graphics-drivers-331-updates

yakkety	dne
xenial	dne
trusty	dne
precise	not-affected

nvidia-graphics-drivers-340

yakkety	Fixed 340.102-0ubuntu0.16.10.1 released
xenial	Fixed 340.102-0ubuntu0.16.04.1 released
trusty	Fixed 340.102-0ubuntu0.14.04.1 released
precise	Fixed 340.102-0ubuntu0.12.04.1 released

nvidia-graphics-drivers-340-updates

yakkety	not-affected
xenial	not-affected
trusty	dne
precise	not-affected

nvidia-graphics-drivers-346

yakkety	dne
xenial	dne
trusty	dne
precise	dne

nvidia-graphics-drivers-346-updates

yakkety	dne
xenial	dne
trusty	dne
precise	dne

nvidia-graphics-drivers-352

yakkety	not-affected
xenial	not-affected
trusty	dne
precise	dne

nvidia-graphics-drivers-352-updates

yakkety	not-affected
xenial	not-affected
trusty	dne
precise	dne

nvidia-graphics-drivers-361

yakkety	not-affected
xenial	not-affected
trusty	dne
precise	dne

nvidia-graphics-drivers-367

yakkety	not-affected
xenial	not-affected
trusty	dne
precise	dne

nvidia-graphics-drivers-96

yakkety	dne
xenial	dne
trusty	dne
precise	ignored

nvidia-graphics-drivers-96-updates

yakkety	dne
xenial	dne
trusty	dne
precise	ignored

nvidia-graphics-drivers-experimental-304

yakkety	dne
xenial	dne
trusty	dne
precise	not-affected

nvidia-graphics-drivers-experimental-310

yakkety	dne
xenial	dne
trusty	dne
precise	not-affected

nvidia-graphics-drivers-tegra

yakkety	dne
xenial	dne
trusty	dne
precise	not-affected

nvidia-graphics-drivers-updates

yakkety	dne
xenial	dne
trusty	dne
precise	not-affected

Common Weakness Enumeration

CWE-190 - Integer Overflow or Wraparound
The software performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control.

References

http://nvidia.custhelp.com/app/answers/detail/a_id/4398