CVE-2015-5950

Severity Score

6.9

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304.128, R340 before 340.93, and R352 before 352.41 on Linux; and R352 before 352.46 on GRID vGPU and vSGA allows local users to write to an arbitrary kernel memory location and consequently gain privileges via a crafted ioctl call.

Vulnerabilidad en el controlador de pantalla NVIDIA R352 en versiones anteriores a 353.82 y R340 en versiones anteriores a 341.81 en Windows; R304 en versiones anteriores a 304.128, R340 en versiones anteriores a 340.93 y R352 en versiones anteriores a 352.41 en Linux y R352 en versiones anteriores a 352.46 en GRID vGPU y vSGA, permite a usuarios locales escribir en una posición de memoria del kernel arbitraria y por consiguiente obtener privilegios a traves de una llamada ioctl manipulada.

*Credits: N/A

CVSS Scores

NISTv2 6.9

Attack Vector

Local

Attack Complexity

Medium

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2015-08-06 CVE Reserved
2015-09-28 CVE Published
2023-03-08 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CAPEC

References (6)

URL	Tag	Source
http://www.securitytracker.com/id/1033662	Vdb Entry
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04815468	X_refsource_confirm
https://support.lenovo.com/us/en/product_security/len_3313	X_refsource_confirm

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://nvidia.custhelp.com/app/answers/detail/a_id/3763/~/cve-2015-5950-memory-corruption-due-to-an-unsanitized-pointer-in-the-nvidia	2016-12-08
http://www.ubuntu.com/usn/USN-2747-1	2016-12-08
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04815468	2016-12-08

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Nvidia Search vendor "Nvidia"	Display Driver Search vendor "Nvidia" for product "Display Driver"	<= 352.86 Search vendor "Nvidia" for product "Display Driver" and version " <= 352.86"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Search vendor "Microsoft" for product "Windows"	*	-	Safe
Nvidia Search vendor "Nvidia"	Display Driver Search vendor "Nvidia" for product "Display Driver"	340.43 Search vendor "Nvidia" for product "Display Driver" and version "340.43"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Search vendor "Microsoft" for product "Windows"	*	-	Safe
Nvidia Search vendor "Nvidia"	Display Driver Search vendor "Nvidia" for product "Display Driver"	340.52 Search vendor "Nvidia" for product "Display Driver" and version "340.52"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Search vendor "Microsoft" for product "Windows"	*	-	Safe
Nvidia Search vendor "Nvidia"	Display Driver Search vendor "Nvidia" for product "Display Driver"	341.44 Search vendor "Nvidia" for product "Display Driver" and version "341.44"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Search vendor "Microsoft" for product "Windows"	*	-	Safe
Nvidia Search vendor "Nvidia"	Display Driver Search vendor "Nvidia" for product "Display Driver"	353.06 Search vendor "Nvidia" for product "Display Driver" and version "353.06"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Search vendor "Microsoft" for product "Windows"	*	-	Safe
Nvidia Search vendor "Nvidia"		Gpu Driver Search vendor "Nvidia" for product "Gpu Driver"				<= 352.30 Search vendor "Nvidia" for product "Gpu Driver" and version " <= 352.30"		-		Affected
Nvidia Search vendor "Nvidia"		Display Driver Search vendor "Nvidia" for product "Display Driver"				<= 352.09 Search vendor "Nvidia" for product "Display Driver" and version " <= 352.09"		linux		Affected
Nvidia Search vendor "Nvidia"		Display Driver Search vendor "Nvidia" for product "Display Driver"				304.108 Search vendor "Nvidia" for product "Display Driver" and version "304.108"		linux		Affected
Nvidia Search vendor "Nvidia"		Display Driver Search vendor "Nvidia" for product "Display Driver"				304.119 Search vendor "Nvidia" for product "Display Driver" and version "304.119"		linux		Affected
Nvidia Search vendor "Nvidia"		Display Driver Search vendor "Nvidia" for product "Display Driver"				304.121 Search vendor "Nvidia" for product "Display Driver" and version "304.121"		linux		Affected
Nvidia Search vendor "Nvidia"		Display Driver Search vendor "Nvidia" for product "Display Driver"				304.123 Search vendor "Nvidia" for product "Display Driver" and version "304.123"		linux		Affected
Nvidia Search vendor "Nvidia"		Display Driver Search vendor "Nvidia" for product "Display Driver"				304.125 Search vendor "Nvidia" for product "Display Driver" and version "304.125"		linux		Affected
Nvidia Search vendor "Nvidia"		Display Driver Search vendor "Nvidia" for product "Display Driver"				352.21 Search vendor "Nvidia" for product "Display Driver" and version "352.21"		linux		Affected
Nvidia Search vendor "Nvidia"		Display Driver Search vendor "Nvidia" for product "Display Driver"				352.30 Search vendor "Nvidia" for product "Display Driver" and version "352.30"		linux		Affected