CVE-2023-0188

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged user can cause improper restriction of operations within the bounds of a memory buffer cause an out-of-bounds read, which may lead to denial of service.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*
OR cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*
cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*

History

20 Oct 2023, 20:16

Type Values Removed Values Added
References
  • (MISC) https://security.gentoo.org/glsa/202310-02 - Third Party Advisory

07 Apr 2023, 15:17

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*
References (MISC) https://nvidia.custhelp.com/app/answers/detail/a_id/5452 - (MISC) https://nvidia.custhelp.com/app/answers/detail/a_id/5452 - Vendor Advisory
CWE CWE-125
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
First Time Linux
Vmware vsphere
Linux linux Kernel
Redhat
Citrix hypervisor
Microsoft
Microsoft windows
Citrix
Vmware
Redhat enterprise Linux Kernel-based Virtual Machine
Nvidia virtual Gpu
Nvidia

Information

Published : 2023-04-01 05:15

Updated : 2023-10-20 20:16


NVD link : CVE-2023-0188

Mitre link : CVE-2023-0188


JSON object : View

Products Affected

citrix

  • hypervisor

redhat

  • enterprise_linux_kernel-based_virtual_machine

vmware

  • vsphere

nvidia

  • virtual_gpu

linux

  • linux_kernel

microsoft

  • windows
CWE
CWE-125

Out-of-bounds Read