NVIDIA Windows GPU Display Driver 375.x < 377.35 / 382.x < 382.05 Multiple Vulnerabilities

high Nessus Plugin ID 100259

Language:

Synopsis

A display driver installed on the remote Windows host is affected by multiple vulnerabilities.

Description

The version of the NVIDIA GPU display driver installed on the remote Windows host is 375.x prior to 377.35 or 382.x prior to 382.05. It is, therefore, affected by multiple vulnerabilities :

- An uninitialized pointer flaw exists in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape due to improper validation of user-supplied input. A local attacker can exploit this to cause a denial of service condition or potentially to gain elevated privileges.
(CVE-2017-0341)

- An out-of-bounds access error exists in the kernel mode layer (nvlddmkm.sys) handler due to certain incorrect calculations. A local attacker can exploit this to cause a denial of service condition or potentially to gain elevated privileges. (CVE-2017-0342)

- A race condition exists in the kernel mode layer (nvlddmkm.sys) handler due to improper synchronization of certain functions. A local attacker can exploit this to cause a denial of service condition or potentially to gain elevated privileges. (CVE-2017-0343)

- An unspecified flaw exists in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape that allows a local attacker to access arbitrary physical memory and gain elevated privileges. (CVE-2017-0344)

- An out-of-bounds access error exists in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape due to improper validation of user-supplied array size input. A local attacker can exploit this to cause a denial of service condition or potentially to gain elevated privileges. (CVE-2017-0345)

- A buffer overflow condition exists in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape due to improper validation of user-supplied input. A local attacker can exploit this to cause a denial of service condition or potentially to gain elevated privileges.
(CVE-2017-0346)

- An array-indexing error exists in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape due to improper validation of user-supplied input. A local attacker can exploit this to cause a denial of service condition or potentially to gain elevated privileges. (CVE-2017-0347)

- A NULL pointer dereference flaw exists in the kernel mode layer (nvlddmkm.sys) handler due to improper validation of user-supplied input. A local attacker can exploit this to cause a denial of service condition or potentially to gain elevated privileges.
(CVE-2017-0348)

- An invalid pointer flaw exists in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape due to improper validation of a user-supplied pointer before it is dereferenced for a write operation. A local attacker can exploit this to cause a denial of service condition or potentially to gain elevated privileges. (CVE-2017-0349)

- A flaw exists in the kernel mode layer handler for DxgDdiEscape due to the driver improperly locking on certain conditions. A local attacker can exploit this to cause a denial of service condition. (CVE-2017-0353)

- A flaw exists in the kernel mode layer handler for DxgkDdiEscape where a call to certain functions requiring lower IRQL can be made under raised IRQL. A local attacker can exploit this to cause a denial of service condition. (CVE-2017-0354)

- A flaw exists in the kernel mode layer handler for DxgkDdiEscape due to accessing paged memory while holding a spin lock. A local attacker can exploit this to cause a denial of service condition.
(CVE-2017-0355)

Solution

Upgrade the NVIDIA graphics driver to version 377.35 / 382.05 or later in accordance with the vendor advisory.

Plugin Details

Severity: High

ID: 100259

File Name: nvidia_win_cve_2017_0355.nasl

Version: 1.7

Type: local

Agent: windows

Family: Windows

Published: 5/17/2017

Updated: 4/5/2023

Configuration: Enable paranoid mode

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 7.2

Temporal Score: 5.3

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2017-0349

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:nvidia:gpu_driver

Required KB Items: Settings/ParanoidReport, WMI/DisplayDrivers/NVIDIA

Exploit Ease: No known exploits are available

Patch Publication Date: 5/9/2017

Vulnerability Publication Date: 5/9/2017

Reference Information

CVE: CVE-2017-0341, CVE-2017-0342, CVE-2017-0343, CVE-2017-0344, CVE-2017-0345, CVE-2017-0346, CVE-2017-0347, CVE-2017-0348, CVE-2017-0349, CVE-2017-0353, CVE-2017-0354, CVE-2017-0355

BID: 98393, 98475

Detections

Analytics