
CVE-2017-6272 – Ubuntu Security Notice USN-3461-1
https://notcve.org/view.php?id=CVE-2017-6272
22 Sep 2017 — NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to a denial of service or possible escalation of privileges. NVIDIA GPU Display Driver contiene una vulnerabilidad en el controlador de capas del modo kernel, en donde un valor que se pasa de un usuario al controlador no se valida correctamente y se emplea como índice para un array que podría llevar a un... • http://nvidia.custhelp.com/app/answers/detail/a_id/4544 • CWE-20: Improper Input Validation •

CVE-2016-7383
https://notcve.org/view.php?id=CVE-2016-7383
08 Nov 2016 — For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in a memory mapping API in the kernel mode layer (nvlddmkm.sys) handler, leading to denial of service or potential escalation of privileges. Para los productos NVIDIA Quadro, NVS y GeForce, NVIDIA Windows GPU Display Driver R340 en versiones anteriores a 342.00 y R375 en versiones anteriores a 375.63 contiene una vulnerabilidad en una API de mapeo de memoria ... • http://nvidia.custhelp.com/app/answers/detail/a_id/4247 • CWE-264: Permissions, Privileges, and Access Controls •

CVE-2016-7388
https://notcve.org/view.php?id=CVE-2016-7388
08 Nov 2016 — For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges. Para los productos NVIDIA Quadro, NVS y GeForce, NVIDIA Windows GPU Display Driver R340 en versiones anteriores a 342.00 y R375 en versiones anteriores a 375.63 contiene una vulnerab... • http://nvidia.custhelp.com/app/answers/detail/a_id/4247 • CWE-264: Permissions, Privileges, and Access Controls •

CVE-2016-7381
https://notcve.org/view.php?id=CVE-2016-7381
08 Nov 2016 — For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where a user input to index an array is not bounds checked, leading to denial of service or potential escalation of privileges. Para los productos NVIDIA Quadro, NVS y GeForce, NVIDIA Windows GPU Display Driver R340 en versiones anteriores a 342.00 y R375 en versiones anteriores a 375.63 contien... • http://nvidia.custhelp.com/app/answers/detail/a_id/4247 • CWE-264: Permissions, Privileges, and Access Controls •

CVE-2016-4959
https://notcve.org/view.php?id=CVE-2016-4959
08 Nov 2016 — For the NVIDIA Quadro, NVS, and GeForce products, there is a Remote Desktop denial of service. A successful exploit of a vulnerable system will result in a kernel null pointer dereference, causing a blue screen crash. Para los productos NVIDIA Quadro, NVS y GeForce, hay una denegación de servicio Remote Desktop. Una explotación exitosa de la vulnerabilidad del sistema tendría como resultado en un a referencia a puntero nulo del kernel, causando una caída de pantalla azul. • http://nvidia.custhelp.com/app/answers/detail/a_id/4213 • CWE-476: NULL Pointer Dereference •

CVE-2016-5025
https://notcve.org/view.php?id=CVE-2016-5025
08 Nov 2016 — For the NVIDIA Quadro, NVS, and GeForce products, improper sanitization of parameters in the NVAPI support layer causes a denial of service vulnerability (blue screen crash) within the NVIDIA Windows graphics drivers. Para los productos NVIDIA Quadro, NVS y GeForce, desinfección inadecuada de los párametros en la capa de soporte NVAPI provoca una vulnerabilidad de denegación de servicio (caída de pantalla azul) dentro de los controladores gráficos de NVIDIA Windows. • http://nvidia.custhelp.com/app/answers/detail/a_id/4213 • CWE-20: Improper Input Validation •

CVE-2016-7382 – Ubuntu Security Notice USN-3122-1
https://notcve.org/view.php?id=CVE-2016-7382
04 Nov 2016 — For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows or nvidia.ko for Linux) handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges. Para los productos NVIDIA Quadro, NVS, GeForce y Tesla, NVIDIA GPU Display Driver contiene una vulnerabilidad en el controlador de la capa de modo kernel (nvlddmkm.sys para Windows o nvi... • http://nvidia.custhelp.com/app/answers/detail/a_id/4246 • CWE-275: Permission Issues •

CVE-2016-7389 – Ubuntu Security Notice USN-3122-1
https://notcve.org/view.php?id=CVE-2016-7389
04 Nov 2016 — For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver on Linux R304 before 304.132, R340 before 340.98, R367 before 367.55, R361_93 before 361.93.03, and R370 before 370.28 contains a vulnerability in the kernel mode layer (nvidia.ko) handler for mmap() where improper input validation may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges. Para los productos NVIDIA Quadro, NVS, GeForce y Tesla, NVIDIA GPU Display Driver en Linux R304 ... • http://nvidia.custhelp.com/app/answers/detail/a_id/4246 • CWE-264: Permissions, Privileges, and Access Controls •

CVE-2016-7384 – NVIDIA Driver - UVMLiteController ioctl Handling Unchecked Input/Output Lengths Privilege Escalation
https://notcve.org/view.php?id=CVE-2016-7384
29 Oct 2016 — For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) where unchecked input/output lengths in UVMLiteController Device IO Control handling may lead to denial of service or potential escalation of privileges. Para los productos NVIDIA Quadro, NVS y GeForce, NVIDIA Windows GPU Display Driver R340 en versiones anteriores a 342.00 y R375 en versiones anteriores a 375.63 contie... • https://packetstorm.news/files/id/139384 • CWE-264: Permissions, Privileges, and Access Controls •

CVE-2016-7385 – NVIDIA Driver - Unchecked Write to User-Provided Pointer in Escape 0x700010d
https://notcve.org/view.php?id=CVE-2016-7385
29 Oct 2016 — For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x700010d where a value passed from a user to the driver is used without validation as the index to an internal array, leading to denial of service or potential escalation of privileges. Para los productos NVIDIA Quadro, NVS y GeForce, NVIDIA Windows GPU Display Driver R340 en versiones anter... • https://packetstorm.news/files/id/139388 • CWE-264: Permissions, Privileges, and Access Controls •