CVE-2020-5963
Published: 24 June 2020
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure.
From the Ubuntu Security Team
Thomas E. Carroll discovered that the NVIDIA Cuda grpahics driver did not properly perform access control when performing IPC. An attacker could use this to cause a denial of service or possibly execute arbitrary code.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
nvidia-graphics-drivers-390 Launchpad, Ubuntu, Debian |
bionic |
Released
(390.138-0ubuntu0.18.04.1)
|
| eoan |
Released
(390.138-0ubuntu0.19.10.1)
|
|
| focal |
Released
(390.138-0ubuntu0.20.04.1)
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Does not exist
|
|
|
nvidia-graphics-drivers-440 Launchpad, Ubuntu, Debian |
bionic |
Released
(440.100-0ubuntu0.18.04.1)
|
| eoan |
Released
(440.100-0ubuntu0.19.10.1)
|
|
| focal |
Released
(440.100-0ubuntu0.20.04.1)
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Does not exist
|
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 7.8 |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges required | Low |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality | High |
| Integrity impact | High |
| Availability impact | High |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |