CVE-2015-8328

Unspecified vulnerability in the NVAPI support layer in the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows allows local users to obtain sensitive information, cause a denial of service (crash), or possibly gain privileges via unknown vectors. NOTE: this identifier was SPLIT from CVE-2015-7869 per ADT2 and ADT3 due to different vulnerability types and affected versions.

CVSS v2.0 6.6 MEDIUM

6.6^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:M/Au:N/C:C/I:P/A:C

Exploitability : 3.4 / Impact : 9.5

Access Vector LOCAL

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact PARTIAL

Availability Impact COMPLETE

References

Link	Resource
http://nvidia.custhelp.com/app/answers/detail/a_id/3808/kw/security	Vendor Advisory
http://www.securitytracker.com/id/1034176	Third Party Advisory VDB Entry
http://nvidia.custhelp.com/app/answers/detail/a_id/3808/kw/security	Vendor Advisory
http://www.securitytracker.com/id/1034176	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:nvidia:gpu_driver::::::::
	cpe:2.3:a:nvidia:gpu_driver::::::::
	cpe:2.3:a:nvidia:gpu_driver::::::::

cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

History

21 Nov 2024, 02:38

Type	Values Removed	Values Added
References	~~() http://nvidia.custhelp.com/app/answers/detail/a_id/3808/kw/security - Vendor Advisory~~	() http://nvidia.custhelp.com/app/answers/detail/a_id/3808/kw/security - Vendor Advisory
References	~~() http://www.securitytracker.com/id/1034176 - Third Party Advisory, VDB Entry~~	() http://www.securitytracker.com/id/1034176 - Third Party Advisory, VDB Entry

Information

Published : 2015-11-24 20:59

Updated : 2024-11-21 02:38

NVD link : CVE-2015-8328

Mitre link : CVE-2015-8328

CVE.ORG link : CVE-2015-8328

JSON object : View

Products Affected

nvidia

gpu_driver

microsoft

windows

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2015-8328", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:C/I:P/A:C", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 9.5, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.4, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-11-24T20:59:23.333", "references": [{"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/3808/kw/security", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id/1034176", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/3808/kw/security", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id/1034176", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the NVAPI support layer in the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows allows local users to obtain sensitive information, cause a denial of service (crash), or possibly gain privileges via unknown vectors. NOTE: this identifier was SPLIT from CVE-2015-7869 per ADT2 and ADT3 due to different vulnerability types and affected versions."}, {"lang": "es", "value": "Vulnerabilidad no especificada en la capa de soporte NVAPI en el driver de gr\u00e1ficos NVIDIA GPU R340 en versiones anteriores a 341.92, R352 en versiones anteriores a 354.35 y R358 en versiones anteriores a 358.87 en Windows permite a usuarios locales obtener informaci\u00f3n sensible, causar una denegaci\u00f3n de servicio (ca\u00edda) o posiblemente obtener privilegios a trav\u00e9s de vectores desconocidos. NOTA: este identificador fue SEPARADO de CVE-2015-7869 por ADT2 y ADT3 por tratarse de distintos tipos de vulnerabilidad y de versiones afectadas."}], "lastModified": "2024-11-21T02:38:18.420", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3937929C-A1C1-40AC-9E8C-1B5F120B0EDB", "versionEndExcluding": "341.92", "versionStartIncluding": "340"}, {"criteria": "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "02AB208A-742D-480A-8093-EBA8D7A31427", "versionEndIncluding": "354.35", "versionStartIncluding": "352"}, {"criteria": "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C075718B-D525-493A-AE31-119D9BCD85FB", "versionEndIncluding": "358.87", "versionStartIncluding": "358"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}