NVIDIA Patches Security Issues in GPU Display Driver for Windows, Linux

guest · Feb 25, 2019

NVIDIA Patches Security Issues in GPU Display Driver for Windows, Linux
February 25, 2019
https://www.bleepingcomputer.com/ne...sues-in-gpu-display-driver-for-windows-linux/

NVIDIA released a security update for the NVIDIA GPU Display Driver software to patch eight security issues that could lead to code execution, escalation of privileges, denial of service, or information disclosure on both Windows and Linux machines.

While all these software flaws require local user access and cannot be exploited remotely, attackers could take advantage of them by remotely planting malicious tools through various means on a system running a vulnerable NVIDIA GPU Display Driver.
The NVIDIA GPU Display Driver - February 2019 security bulletin also contains a full list of software products affected by the security issues patched by NVIDIA in their February 2019 Security Update.
Click to expand...

Floyd 57 · Feb 25, 2019

could lead to code execution, escalation of privileges, denial of service, or information disclosure on both Windows and Linux machines.
Click to expand...

Sounds spooky

Update your drivers boys

I'm using latest non-beta 1809 build, 17763.316, and ddu doesn't work for me, on a clean install of windows 10 it refuses to do anything and closes by itself, according to the forums https://www.wagnardsoft.com/forums/viewtopic.php?f=5&t=1490&sid=e40353c88c57d037001e2c9dadd55f3a they say any version above 17763.55 (three digits) is not guaranteed to work, so I guess for now I'll stick with the control panel uninstall and my collection of uninstallers that each bring something to the table when it comes to uninstalling

You have to open nvidia's big pdf file to find changes, they just say "Provides the optimal gaming experience for Anthem and DiRT Rally 2.0" in the short changelog, you'd never know there's so many changes both performance-wise and security-wise without opening their big pdf file https://us.download.nvidia.com/Windows/419.17/419.17-win10-win8-win7-desktop-release-notes.pdf

Even worse they release a new driver every 2 weeks or so, sometimes even less, last 4 drivers were 15 jan, 4, 13, 22 feb

Stupendous Man · Feb 25, 2019

Sergiu Gatlan writes,
"While all these software flaws require local user access and cannot be exploited remotely, attackers could take advantage of them by remotely planting malicious tools through various means on a system running a vulnerable NVIDIA GPU Display Driver."

How can those vulnerabilities as mentioned in NVIDIA Security Bulletin 4772 be exploited remotely, as Sergiu Gatlan seems to claim, if all are AV:L (Attack Vector:Local)?
Isn't the definition of AV:L that it is only exploitable with local access?
As all vulnerabilities mentioned in NVIDIA Security Bulletin 4772 have vectors AV:L, I don't see any difference with any previous NVIDIA vulnerabilities with vector AV:L.

Where Sergiu Gatlan writes "attackers could take advantage of them by remotely planting malicious tools through various means", does he mean by other (non NVIDIA) vulnerabilities?
If so - yeah, but that is true for any other AV:L vulnerability, of course. It doesn't make it any more scarier than any other AV:L vulnerability.

plat · Feb 25, 2019

Well, even despite wondering about actual risks to the average user, I went ahead and DDU'd in safe mode (thank goodness, for me DDU works well, I used version 18.0.0.9 running Windows 10 v. 1809 17763.316) and regained about 2 additional GB of disk space from removal of other NVIDIA junk besides the driver. So far the driver 419.17 seems to be OK, especially with startup. So far. Usually, I keep one or two versions behind the latest, more out of really disliking installing this driver and all the junk removal and telemetry-disabling afterward.

Maybe the above DDU version is more suitable for Windows v.1809 now?

Edit: Oh I see where, on the webpage, it's stated it's at your own risk for higher than 17763.xx. Thanks, Floyd57

guest · May 10, 2019

Nvidia Warns Windows Gamers on GPU Driver Flaws
May 10, 2019
https://threatpost.com/nvidia-windows-gamers-gpu-flaws/144595/

Graphics chipmaker Nvidia has issued three patches for high-severity vulnerabilities in its GPU display driver, which could lead to information disclosure, escalation of privileges and denial of service (DoS) in impacted Windows gaming devices.

The most severe of the flaws, CVE‑2019‑5675, could be exploited to launch DoS attacks that could cripple the system, as well as give attackers escalation of privileges and disclose system information, according to a Thursday advisory released by Nvidia.
The bug exists in the kernel mode layer handler component of the driver.

Another flaw, CVE‑2019‑5676, exists in the driver’s installer software and is also rated high-severity. The software incorrectly loads Windows system dynamic link libraries (DLLs) without validating their path or signature.
This could enable a DLL preloading attack [...]
Click to expand...

guest · Aug 2, 2019

NVIDIA Patches High Severity Flaws in Windows GPU Display Driver
August 2, 2019
https://www.bleepingcomputer.com/ne...severity-flaws-in-windows-gpu-display-driver/

NVIDIA released a GPU display driver security update to fix five high and medium severity vulnerabilities that could lead to local code execution, escalation of privileges, and denial of service on vulnerable Windows computers.
All the security flaws patched today by NVIDIA require local user access and cannot be exploited remotely, with potential attackers having to rely on user interaction to execute malicious code designed to exploit one of the fixed bugs on machines with unpatched display drivers.
Security issues with high severity ratings
The issues come with CVSS V3 base scores ranging from 5.2 to 8.8, with three of them having received high severity risk assessments from NVIDIA, while two others have been assigned medium risk base scores, all of them impacting Windows machines.

The software security issues fixed by NVIDIA as part of the August 2019 security update are listed below, together with full descriptions and the CVSS V3 base scores assigned by the company to each of them.
Click to expand...

NVIDIA: Security Bulletin: NVIDIA GPU Display Driver - August 2019

guest · Nov 6, 2019

NVIDIA Fixes Security Flaws in GPU Driver, GeForce Experience
November 6, 2019
https://www.bleepingcomputer.com/ne...urity-flaws-in-gpu-driver-geforce-experience/

NVIDIA released security updates to fix 12 high and medium severity vulnerabilities in the Windows GPU display driver and the NVIDIA GeForce Experience (GFE) software.

The flaws addressed by NVIDIA today could lead to code execution, escalation of privileges, information disclosure, and denial of service on vulnerable Windows computers after exploitation.
All of today's patched security issues require local user access and cannot be exploited remotely, with attackers having to depend on user interaction to execute the exploits designed to abuse one of the fixed bugs on unpatched systems.
High severity security issues
The patched vulnerabilities received CVSS V3 base scores ranging from 5.1 to 7.8 from NVIDIA, with four of them having received high severity risk assessments, while eight others were assigned medium risk base scores, all of them impacting Windows systems.
Click to expand...

NVIDIA:
Security Bulletin: NVIDIA GPU Display Driver - November 2019
Security Bulletin: NVIDIA GeForce Experience - November 2019

guest · Feb 28, 2020

NVIDIA Fixes High Severity Flaw in Windows GPU Display Driver
February 28, 2020
https://www.bleepingcomputer.com/ne...-severity-flaw-in-windows-gpu-display-driver/

NVIDIA has released a GPU display driver security update today, February 28, 2020, that fixes high and medium severity vulnerabilities that might lead to code execution, local escalation of privileges, information disclosure, and denial of service on unpatched Windows computers.

Today's security updates also fix one high severity and two medium severity flaws in the NVIDIA Virtual GPU Manager and the NVIDIA vGPU graphics driver for guest OS that could lead to denial of service states when triggered.
Windows driver security issues
The two GPU display driver issues come with CVSS V3 base scores ranging from 6.7 to 8.4 and impact Windows machines, while the three NVIDIA vGPU software bugs have severity ratings between 5.5 and 7.8.
Impacted GPU driver versions
Today's NVIDIA GPU Display Driver - February 2019 security bulletin also lists the affected and patched GPU display driver versions: [...]
Click to expand...

NVIDIA: Security Bulletin: NVIDIA GPU Display Driver - February 2020

guest · Jun 24, 2020

NVIDIA patches high severity flaws in Windows, Linux drivers
June 24, 2020
https://www.bleepingcomputer.com/ne...high-severity-flaws-in-windows-linux-drivers/

NVIDIA has released security updates to address security vulnerabilities found in GPU Display and CUDA drivers and Virtual GPU Manager software that could lead to code execution, denial of service, escalation of privileges, and information disclosure on both Windows and Linux machines.

Although all the flaws patched today require local user access and cannot be exploited remotely, with attackers having to first get a foothold on the exposed machines to launch attacks designed to abuse these bugs.
High severity issues affecting Windows, Linux devices
By abusing these vulnerabilities, attackers can escalate privileges to gain permissions above the initial default ones granted by the OS, to render unpatched machines temporarily unusable by triggering denial-of-service states. or to locally execute malicious code on compromised Windows and Linux systems.

The bugs come with CVSS V3 base scores ranging from 4.4 to 7.8, with six of them having received a high-risk assessment from NVIDIA.
Click to expand...

NVIDIA: Security Bulletin: NVIDIA GPU Display Driver - June 2020

guest · Oct 1, 2020

Use an NVIDIA GPU? Check whether you need security updates
October 1, 2020
https://www.helpnetsecurity.com/2020/10/01/nvidia-gpu-security-updates/

NVIDIA has released security updates for the NVIDIA GPU Display Driver and the NVIDIA Virtual GPU Manager that fix a variety of serious vulnerabilities.
NVIDIA GPU Display Driver security updates
Four security holes have been plugged in the Display Driver:

CVE‑2020‑5979 affects the Control Panel component and may lead to privilege escalation

CVE‑2020‑5980 affects multiple components and may lead to code execution or DOS

CVE‑2020‑5981 affects the DirectX11 user mode driver and can, according to NVIDIA, lead to DoS

CVE‑2020‑5982 affects the kernel mode layer and can lead to DoS.

Click to expand...

CVE‑2020‑5980
CVE‑2020‑5980 was unearthed by Andy Gill of Pen Test Partners and the discovery detailed in a blog post published on Thursday.
The vulnerability allows for DLL hijacking, i.e., exploitation of execution flow of an application via external DLLs.
CVE‑2020‑5981
CVE‑2020‑5981 was discovered by Piotr Bania of Cisco Talos. The CVE number covers multiple vulnerabilities and, Cisco claims, they could be exploited to achieve remote code execution (and not just DoS).
NVIDIA vGPU Software security updates
Vulnerabilities CVE‑2020‑5983 to CVE‑2020‑5989 are found in the vGPU plugin and could lead to DoS, information disclosure, code execution, tampering, and privilege escalation.
Click to expand...

NVIDIA: Security Bulletin: NVIDIA GPU Display Driver - September 2020

Cisco Talos: Vulnerability Spotlight: Remote code execution bugs in NVIDIA D3D10 driver
Pen Test Partners: DLL Hijacking in NVIDIA SMI

guest · Jan 7, 2021

Nvidia Warns Windows Gamers of High-Severity Graphics Driver Flaws
In all, Nvidia patched flaws tied to 16 CVEs across its graphics drivers and vGPU software, in its first security update of 2021.
January 7, 2021
https://threatpost.com/nvidia-windows-gamers-graphics-driver-flaws/162857/

Nvidia, which makes gaming-friendly graphics processing units (GPUs), on Thursday fixed a slew of high-severity flaws affecting its graphics driver. The vulnerabilities allow bad actors to cripple systems with denial of service attacks, escalate privileges, tamper with data or sniff out sensitive data.

Affected is Nvidia’s graphics driver (formally known as the GPU Display Driver) for Windows
Nvidia’s Thursday security update addresses flaws tied to 16 CVEs overall. The most severe of these (CVE‑2021‑1051) is an issue in the graphic drivers’ kernel mode layer. This flaw ranks 8.4 out of 10 on the CVSS scale, making it high severity.
Click to expand...

Another high-severity flaw (CVE‑2021‑1052) in this same kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape could allow user-mode clients to access legacy privileged application programming interfaces (APIs). According to Nvidia, this “may lead to denial of service, escalation of privileges, and information disclosure.”

[...] Beyond its graphics drivers, Nvidia warned of flaws tied to nine high-severity CVEs in its virtual GPU (vGPU) software.
vGPU Software Flaws
Many of the flaws addressed in Nvidia’s Thursday security advisory stem from Nvidia’s vGPU manager, its tool that enables multiple virtual machines to have simultaneous, direct access to a single physical GPU, while also using Nvidia graphics drivers deployed on non-virtualized operating systems.
Click to expand...

NVIDIA: Security Bulletin: NVIDIA GPU Display Driver - January 2021

guest · Apr 26, 2021

Nvidia Warns: Severe Security Bugs in GPU Driver, vGPU Software
The gaming- and AI-friendly graphics accelerators can open the door to a range of cyberattacks.
April 26, 2021
https://threatpost.com/nvidia-security-bugs-gpu-vgpu/165597/

Nvidia has disclosed a group of security vulnerabilities in the Nvidia graphics processing unit (GPU) display driver, which could subject gamers and others to privilege-escalation attacks, arbitrary code execution, denial of service (DoS) and information disclosure.

Meanwhile, the Nvidia virtual GPU (vGPU) software also has a group of bugs that could lead to a range of similar attacks.
Click to expand...

Nvidia has released patches to mitigate all of the bugs, which uses can download at through the Nvidia Driver Downloads page or, for the vGPU software update, through the Nvidia Licensing Portal. Affected version tables are available in Nvidia’s advisory, released Friday.
Click to expand...

NVIDIA: Security Bulletin: NVIDIA GPU Display Driver - April 2021

Log in or Sign up

NVIDIA Patches Security Issues in GPU Display Driver for Windows, Linux

guest Guest

Floyd 57 Registered Member

Stupendous Man Registered Member

plat Registered Member

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

NVIDIA Patches Security Issues in GPU Display Driver for Windows, Linux

guest Guest

Floyd 57 Registered Member

Stupendous Man Registered Member

plat Registered Member

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches