General Discussions
NVidia Windows Driver Security Vulnerabilities
 

NVidia Windows Driver Security Vulnerabilities  

  RSS

Yukikaze
(@yukikaze)
Prominent Member Moderator
Joined: 3 years ago
 

The tl;dr: If you are using NVidia eGPUs on Windows, go and update your driver to the latest.

nvidia

Source: https://www.forbes.com/sites/kevinmurnane/2019/05/11/update-your-drivers-right-now-if-you-have-an-nvidia-geforce-quadro-or-tesla-graphics-card

CVE-2019-5675 Detail

Current Description

NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the product does not properly synchronize shared data, such as static variables across threads, which can lead to undefined behavior and unpredictable data changes, which may lead to denial of service, escalation of privileges, or information disclosure.

Base Score: 7.8 HIGH 

CVE-2019-5676 Detail

Current Description

NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in which it incorrectly loads Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), leading to escalation of privileges through code execution.

 

Base Score: 6.7 MEDIUM 

CVE-2019-5677 Detail

Current Description

NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DeviceIoControl where the software reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer, which may lead to denial of service.

Base Score: 5.5 MEDIUM 

This topic was modified 3 months ago

My eGPU Zoo - Link to my Implementations.
Want to output [email protected] out of an old system on the cheap? Read here.
Give your Node Pro a second Thunderbolt3 controller for reliable peripherals by re-using a TB3 dock (~50$).

"Always listen to experts. They'll tell you what can't be done, and why. Then do it."- Robert A. Heinlein, "Time Enough for Love."


ReplyQuote