阿里云漏洞库

漏洞描述

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in firmware where the driver contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary, and may lead to denial of service or system crash.

解决建议

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
https://lists.debian.org/debian-lts-announce/2022/01/msg00013.html
https://nvidia.custhelp.com/app/answers/detail/a_id/5211
https://security.gentoo.org/glsa/202310-02

受影响软件情况

1
#	类型	厂商	产品	版本	影响面
	运行在以下环境
	应用	nvidia	gpu_display_driver	*	From (including) 418.197.02	Up to (excluding) 418.211.00
	运行在以下环境
	应用	nvidia	gpu_display_driver	*	From (including) 427.33	Up to (excluding) 427.48
	运行在以下环境
	应用	nvidia	gpu_display_driver	*	From (including) 450.119.03	Up to (excluding) 450.142.00
	运行在以下环境
	应用	nvidia	gpu_display_driver	*	From (including) 452.96	Up to (excluding) 453.10
	运行在以下环境
	应用	nvidia	gpu_display_driver	*	From (including) 460.73.01	Up to (excluding) 460.91.03
	运行在以下环境
	应用	nvidia	gpu_display_driver	*	From (including) 462.31	Up to (excluding) 462.96
	运行在以下环境
	系统	debian_11	nvidia-graphics-drivers	*		Up to (excluding) 460.91.03-1
	运行在以下环境
	系统	debian_12	nvidia-graphics-drivers	*		Up to (excluding) 460.91.03-1
	运行在以下环境
	系统	debian_9	nvidia-graphics-drivers	*		Up to (excluding) 390.144-1~deb9u1
	运行在以下环境
	系统	ubuntu_18.04	nvidia-graphics-drivers-470	*		Up to (excluding) 460.91.03-0ubuntu0.18.04.1
	运行在以下环境
	系统	ubuntu_20.04	nvidia-graphics-drivers-470	*		Up to (excluding) 460.91.03-0ubuntu0.20.04.1
	运行在以下环境
	系统	ubuntu_21.04	nvidia-graphics-drivers-390	*		Up to (excluding) 450.142.00-0ubuntu0.21.04.1
	运行在以下环境
	系统	ubuntu_21.10	nvidia-graphics-drivers-390	*		Up to (excluding) 450.142.00-0ubuntu1
	运行在以下环境
	系统	ubuntu_22.04	nvidia-graphics-drivers-460	*		Up to (excluding) 450.142.00-0ubuntu1
	运行在以下环境
	系统	ubuntu_22.10	nvidia-graphics-drivers-460	*		Up to (excluding) 450.142.00-0ubuntu1

攻击路径

远程
攻击复杂度

容易
权限要求

无需权限
影响范围

有限影响
EXP成熟度

未验证
补丁情况

官方补丁
数据保密性

无影响
数据完整性

无影响
服务器危害

N/A
全网数量

N/A

CWE-ID	漏洞类型
CWE-404	不恰当的资源关闭或释放

低危 nvidia gpu_display_driver 不恰当的资源关闭或释放

漏洞描述

解决建议

参考链接

受影响软件情况