CVE-2023-25515



NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of service, escalation of privileges, data tampering, or information disclosure.

 

ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvidiaCNA
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 11%
VendorProductVersion
nvidiagpu_display_driver
470 ≤
𝑥
< 474.44
nvidiagpu_display_driver
530 ≤
𝑥
< 536.23
nvidiagpu_display_driver
530 ≤
𝑥
< 536.40
nvidiagpu_display_driver
470 ≤
𝑥
< 474.44
nvidiagpu_display_driver
525 ≤
𝑥
< 529.11
nvidiagpu_display_driver
530 ≤
𝑥
< 536.25
nvidiagpu_display_driver
450 ≤
𝑥
< 454.23
nvidiagpu_display_driver
470 ≤
𝑥
< 474.44
nvidiagpu_display_driver
525 ≤
𝑥
< 529.11
nvidiagpu_display_driver
530 ≤
𝑥
< 536.25
nvidiagpu_display_driver
470 ≤
𝑥
< 470.199.02
nvidiagpu_display_driver
525 ≤
𝑥
< 525.125.06
nvidiagpu_display_driver
530 ≤
𝑥
< 535.54.03
nvidiagpu_display_driver
450 ≤
𝑥
< 450.248.02
nvidiagpu_display_driver
470 ≤
𝑥
< 470.199.02
nvidiagpu_display_driver
525 ≤
𝑥
< 525.125.06
nvidiagpu_display_driver
530 ≤
𝑥
< 535.54.03
nvidiavirtual_gpu
𝑥
< 11.12
nvidiavirtual_gpu
13.0 ≤
𝑥
< 13.7
nvidiavirtual_gpu
15.0 ≤
𝑥
< 15.2
nvidiacloud_gaming
𝑥
< 531.79
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
nvidia-graphics-drivers
bullseye/non-free
470.256.02-2
fixed
buster
postponed
bookworm/non-free-firmware
535.183.01-1~deb12u1
fixed
bullseye
no-dsa
sid/non-free-firmware
535.216.03-1
fixed
trixie/non-free-firmware
535.216.03-1
fixed
nvidia-graphics-drivers-legacy-340xx
sid/non-free
vulnerable
bullseye
no-dsa
buster
postponed
nvidia-graphics-drivers-legacy-390xx
bullseye/non-free
vulnerable
buster
postponed
sid/non-free
vulnerable
bullseye
no-dsa
nvidia-graphics-drivers-tesla
bookworm/non-free-firmware
525.147.05-7~deb12u1
fixed
bullseye
no-dsa
buster
postponed
sid/non-free-firmware
525.147.05-12
fixed
trixie/non-free-firmware
525.147.05-12
fixed
nvidia-graphics-drivers-tesla-418
bullseye/non-free
vulnerable
buster
postponed
sid/non-free
vulnerable
bullseye
no-dsa
nvidia-graphics-drivers-tesla-450
bullseye/non-free
450.248.02-7~deb11u1
fixed
buster
postponed
sid/non-free
450.248.02-8
fixed
bullseye
no-dsa
nvidia-graphics-drivers-tesla-460
bullseye/non-free
460.106.00-17~deb11u1
fixed
buster
postponed
sid/non-free
460.106.00-18
fixed
bullseye
no-dsa
nvidia-graphics-drivers-tesla-470
bullseye/non-free
470.256.02-1~deb11u2
fixed
buster
postponed
bookworm/non-free
470.256.02-1~deb12u1
fixed
bullseye
no-dsa
trixie/non-free
470.256.02-4
fixed
sid/non-free
470.256.02-4
fixed
nvidia-open-gpu-kernel-modules
bookworm/contrib
535.183.01-1~deb12u1
fixed
bullseye
no-dsa
buster
postponed
sid/contrib
535.216.03-1
fixed
trixie/contrib
535.216.03-1
fixed