CVE-2012-0946 : The NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memo

The NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memory locations by leveraging GPU device-node read/write privileges.

Published 2012-04-22 18:55:04

Updated 2017-12-29 02:29:10

Source Canonical Ltd.

View at NVD, CVE.org

Products affected by CVE-2012-0946

Nvidia » Unix Driver
Versions up to, including, (<=) 295.40
cpe:2.3:a:nvidia:unix_driver:*:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 24 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

https://exchange.xforce.ibmcloud.com/vulnerabilities/74822

NVIDIA Graphics Drivers for Linux GPU privilege escalation CVE-2012-0946 Vulnerability Report
http://nvidia.custhelp.com/app/answers/detail/a_id/3109

Security Bulletin: CVE-2012-0946 in the NVIDIA UNIX driver | NVIDIA
Vendor Advisory
http://secunia.com/advisories/48650

Sign in
http://www.ubuntu.com/usn/usn-1420-1/

USN-1420-1: NVIDIA graphics drivers vulnerability | Ubuntu security notices

Jump to