CVE-2012-0953

A race condition was discovered in the Linux drivers for Nvidia graphics which allowed an attacker to exfiltrate kernel memory to userspace. This issue was fixed in version 295.53.

CVSS v3 5.0 MEDIUM
CVSS v2.0 4.4 MEDIUM

5.0^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.8 / Impact : 3.7

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope CHANGED

4.4^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 3.4 / Impact : 6.4

Access Vector LOCAL

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://bugs.launchpad.net/ubuntu/+source/nvidia-graphics-drivers/+bug/979373	Exploit Third Party Advisory
https://bugs.launchpad.net/ubuntu/+source/nvidia-graphics-drivers/+bug/979373	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:nvidia:display_driver:*:*:*:*:*:linux:*:*

History

21 Nov 2024, 01:36

Type	Values Removed	Values Added
References	~~() https://bugs.launchpad.net/ubuntu/+source/nvidia-graphics-drivers/+bug/979373 - Exploit, Third Party Advisory~~	() https://bugs.launchpad.net/ubuntu/+source/nvidia-graphics-drivers/+bug/979373 - Exploit, Third Party Advisory

Information

Published : 2020-05-08 01:15

Updated : 2024-11-21 01:36

NVD link : CVE-2012-0953

Mitre link : CVE-2012-0953

CVE.ORG link : CVE-2012-0953

JSON object : View

Products Affected

nvidia

display_driver

CWE

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

{"id": "CVE-2012-0953", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.4, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.4, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Secondary", "source": "security@ubuntu.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.0, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 3.7, "exploitabilityScore": 0.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.0, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 3.7, "exploitabilityScore": 0.8}]}, "published": "2020-05-08T01:15:10.867", "references": [{"url": "https://bugs.launchpad.net/ubuntu/+source/nvidia-graphics-drivers/+bug/979373", "tags": ["Exploit", "Third Party Advisory"], "source": "security@ubuntu.com"}, {"url": "https://bugs.launchpad.net/ubuntu/+source/nvidia-graphics-drivers/+bug/979373", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security@ubuntu.com", "description": [{"lang": "en", "value": "CWE-362"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-362"}]}], "descriptions": [{"lang": "en", "value": "A race condition was discovered in the Linux drivers for Nvidia graphics which allowed an attacker to exfiltrate kernel memory to userspace. This issue was fixed in version 295.53."}, {"lang": "es", "value": "Se detect\u00f3 una condici\u00f3n de carrera en los controladores de Linux para los gr\u00e1ficos de Nvidia que permiti\u00f3 a un atacante extraer la memoria del Kernel hacia el espacio de usuario. Este problema fue corregido en la versi\u00f3n 295.53."}], "lastModified": "2024-11-21T01:36:02.290", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:display_driver:*:*:*:*:*:linux:*:*", "vulnerable": true, "matchCriteriaId": "516CB064-BD3A-4C19-8A47-CBD23AAD877F", "versionEndExcluding": "295.53"}], "operator": "OR"}]}], "sourceIdentifier": "security@ubuntu.com"}