CVE-2018-3979
A remote denial-of-service vulnerability exists in the way the Nouveau Display Driver (the default Ubuntu Nvidia display driver) handles GPU shader execution.
Does this matter?
Lower severity and a low EPSS score (1.44%). Track it; it rarely justifies an emergency change on its own.
Description
A remote denial-of-service vulnerability exists in the way the Nouveau Display Driver (the default Ubuntu Nvidia display driver) handles GPU shader execution. A specially crafted pixel shader can cause remote denial-of-service issues. An attacker can provide a specially crafted website to trigger this vulnerability. This vulnerability can be triggered remotely after the user visits a malformed website. No further user interaction is required. Vulnerable versions include Ubuntu 18.04 LTS (linux 4.15.0-29-generic x86_64), Nouveau Display Driver NV117 (vermagic: 4.15.0-29-generic SMP mod_unload).
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- EPSS
- 1.44% probability · 72th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-400
- Affected
- canonical/ubuntu linux · nvidia/geforce gtx 745 firmware · nvidia/geforce gtx 750 firmware · nvidia/geforce gtx 750 ti firmware · nvidia/geforce gtx 840m firmware · nvidia/geforce gtx 845m firmware · nvidia/geforce gtx 850m firmware · nvidia/geforce gtx 860m firmware · nvidia/geforce gtx 950m firmware · nvidia/geforce gtx 960m firmware · nvidia/quadro k620 firmware · nvidia/quadro k1200 firmware · nvidia/quadro k2200 firmware · nvidia/quadro m1000m firmware · nvidia/quadro m1200m firmware · nvidia/grid m30 firmware · nvidia/grid m40 firmware
- Source
- talos-cna@cisco.com
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2018-0647Exploit, Third Party Advisory
- https://talosintelligence.com/vulnerability_reports/TALOS-2018-0647Exploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.