« Volver al listado

CVE-2016-7389

Estado: ModificadaAlta (7.8)—

For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver on Linux R304 before 304.132, R340 before 340.98, R367 before 367.55, R361_93 before 361.93.03, and R370 before 370.28 contains a vulnerability in the kernel mode layer (nvidia.ko) handler for mmap() where improper input validation may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Nvidia — GPU Driver

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2016-7389",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@nvidia.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Quadro, NVS, GeForce, and Tesla (all versions)",
          "versions": [
            {
              "status": "affected",
              "version": "Quadro, NVS, GeForce, and Tesla (all versions)"
            }
          ]
        }
      ]
    }
  ],
  "published": "2016-11-08T20:59:15.710",
  "references": [
    {
      "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4246",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@nvidia.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/94177",
      "source": "psirt@nvidia.com"
    },
    {
      "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4246",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/94177",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver on Linux R304 before 304.132, R340 before 340.98, R367 before 367.55, R361_93 before 361.93.03, and R370 before 370.28 contains a vulnerability in the kernel mode layer (nvidia.ko) handler for mmap() where improper input validation may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges."
    },
    {
      "lang": "es",
      "value": "Para los productos NVIDIA Quadro, NVS, GeForce y Tesla, NVIDIA GPU Display Driver en Linux R304 en versiones anteriores a 304.132, R340 en versiones anteriores a 340.98, R367 en versiones anteriores a 367.55, R361_93 en versiones anteriores a 361.93.03 y R370 en versiones anteriores a 370.28 contiene una vulnerabilidad en el controlador de la capa de modo kernel (nvidia.ko) para mmap() donde una validación de entrada inadecuada podría permitir a usuarios obtener acceso a memoria física arbitraria, conduciendo a una escalada de privilegios."
    }
  ],
  "lastModified": "2026-06-17T00:52:58.507",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:nvidia:gpu_driver:304.79:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1ED0EE81-C22D-453F-B665-36FC6C533CCE"
            },
            {
              "criteria": "cpe:2.3:a:nvidia:gpu_driver:340.52:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2A2A9CCB-D960-4643-AF80-204D516A8369"
            },
            {
              "criteria": "cpe:2.3:a:nvidia:gpu_driver:361.91:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5C93165D-1D1B-4464-8F75-D25FF3692361"
            },
            {
              "criteria": "cpe:2.3:a:nvidia:gpu_driver:365.19:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4A94D9D5-53A5-4A3D-A3BA-C5CD75AA477D"
            },
            {
              "criteria": "cpe:2.3:a:nvidia:gpu_driver:368.81:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "34739729-7504-4313-8AF0-161DE9A1748C"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "155AD4FB-E527-4103-BCEF-801B653DEA37"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@nvidia.com"
}