A display driver installed on the remote Windows host is affected by a vulnerability:

  - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an unprivileged     regular user on the network can cause an out-of-bounds write through a specially crafted shader, which may lead     to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. The     scope of the impact may extend to other components. (CVE-2022-28181)

  - NVIDIA GPU Display Driver for Windows contains a vulnerability in the DirectX11 user mode driver (nvwgf2um/x.dll),     where an unauthorized attacker on the network can cause an out-of-bounds write through a specially crafted shader,     which may lead to code execution to cause denial of service, escalation of privileges, information disclosure, and     data tampering. The scope of the impact may extend to other components. (CVE-2022-28182)

  - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an unprivileged     regular user can cause an out-of-bounds read, which may lead to denial of service and information disclosure.
    (CVE-2022-28183)

  - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for     DxgkDdiEscape, where an unprivileged regular user can access administrator-privileged registers, which may lead to     denial of service, information disclosure, and data tampering. (CVE-2022-28184)

  - NVIDIA GPU Display Driver for Windows contains a vulnerability in the ECC layer, where an unprivileged regular user     can cause an out-of-bounds write, which may lead to denial of service and data tampering. (CVE-2022-28185)

  - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for     DxgkDdiEscape, where the product receives input or data, but does not validate or incorrectly validates that the     input has the properties that are required to process the data safely and correctly, which may lead to denial of     service or data tampering. (CVE-2022-28186)

  - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where the     memory management software does not release a resource after its effective lifetime has ended, which may lead to     denial of service. (CVE-2022-28187)

  - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for     DxgkDdiEscape, where the product receives input or data, but does not validate or incorrectly validates that the     input has the properties that are required to process the data safely and correctly, which may lead to denial of     service. (CVE-2022-28188)

  - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for     DxgkDdiEscape, where a NULL pointer dereference may lead to a system crash. (CVE-2022-28189)

  - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for     DxgkDdiEscape, where improper input validation can cause denial of service. (CVE-2022-28190)

Note that Nessus has not attempted to exploit these issues but has instead relied only on the driver's self-reported version number.

Detections

Analytics

NVIDIA Windows GPU Display Driver (May 2022)

critical Nessus Plugin ID 163399

Version 1.6

Version 1.5

Version 1.4

Version 1.4

Version 1.6 Mar 8, 2024, 6:26 PM IAVM reference Plugin Feed: 202403081826
Version 1.5 Oct 17, 2023, 5:21 PM CVSS metrics ("CVSSv3 score" changed from 8.5 to 9.9. "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" to "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H") CVSSv3 score source (changed from "CVE-2022-28182" to "CVE-2022-28181") Exploit attributes ("Exploit available" set to "False") Plugin Feed: 202310171721
Version 1.4 Mar 23, 2023, 8:46 PM Plugin requirements Plugin Feed: 202303232046
Version 1.4 Oct 17, 2023, 3:14 PM CVSSv3 score source (changed from "CVE-2022-28182" to "CVE-2022-28181") CVSS metrics ("CVSSv3 score" changed from 8.5 to 9.9) CVSS metrics ("CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" to "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H") Exploit attributes ("Exploit available" set to "False") Plugin Feed: 202310171514