CVE-2021-1093
Published: 20 July 2021
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in firmware where the driver contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary, and may lead to denial of service or system crash.
Notes
Author | Note |
---|---|
mdeslaur | some binary drivers are no longer support by NVidia, so they are marked as ignored here |
Priority
Status
Package | Release | Status |
---|---|---|
nvidia-graphics-drivers-304 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Ignored
|
|
nvidia-graphics-drivers-304-updates Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Not vulnerable
(superseded)
|
|
nvidia-graphics-drivers-340 Launchpad, Ubuntu, Debian |
bionic |
Ignored
|
focal |
Ignored
|
|
groovy |
Ignored
|
|
hirsute |
Not vulnerable
(superseded)
|
|
impish |
Not vulnerable
(superseded)
|
|
jammy |
Not vulnerable
(superseded)
|
|
kinetic |
Not vulnerable
(superseded)
|
|
lunar |
Not vulnerable
(superseded)
|
|
mantic |
Not vulnerable
(superseded)
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Ignored
|
|
nvidia-graphics-drivers-340-updates Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(superseded)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Not vulnerable
(superseded)
|
|
nvidia-graphics-drivers-352 Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(superseded)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Not vulnerable
(superseded)
|
|
nvidia-graphics-drivers-352-updates Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(superseded)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Not vulnerable
(superseded)
|
|
nvidia-graphics-drivers-361 Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(superseded)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Not vulnerable
(superseded)
|
|
nvidia-graphics-drivers-367 Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(superseded)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Not vulnerable
(superseded)
|
|
nvidia-graphics-drivers-375 Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(superseded)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Not vulnerable
(superseded)
|
|
nvidia-graphics-drivers-384 Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(superseded)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Needs triage
|
|
nvidia-graphics-drivers-390 Launchpad, Ubuntu, Debian |
bionic |
Released
(390.144-0ubuntu0.18.04.1)
|
focal |
Released
(390.144-0ubuntu0.20.04.1)
|
|
groovy |
Released
(390.144-0ubuntu0.20.10.1)
|
|
hirsute |
Released
(390.144-0ubuntu0.21.04.1)
|
|
impish |
Released
(390.144-0ubuntu1)
|
|
jammy |
Released
(390.144-0ubuntu1)
|
|
kinetic |
Released
(390.144-0ubuntu1)
|
|
lunar |
Released
(390.144-0ubuntu1)
|
|
mantic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
nvidia-graphics-drivers-418-server Launchpad, Ubuntu, Debian |
bionic |
Released
(418.211.00-0ubuntu0.18.04.1)
|
focal |
Released
(418.211.00-0ubuntu0.20.04.1)
|
|
groovy |
Released
(418.211.00-0ubuntu0.20.10.1)
|
|
hirsute |
Released
(418.211.00-0ubunt0.21.04.1)
|
|
impish |
Released
(418.211.00-0ubuntu1)
|
|
jammy |
Released
(418.211.00-0ubuntu1)
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
nvidia-graphics-drivers-430 Launchpad, Ubuntu, Debian |
bionic |
Ignored
|
focal |
Ignored
|
|
groovy |
Ignored
|
|
hirsute |
Ignored
|
|
impish |
Ignored
|
|
jammy |
Ignored
|
|
kinetic |
Ignored
|
|
lunar |
Ignored
|
|
mantic |
Ignored
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
nvidia-graphics-drivers-435 Launchpad, Ubuntu, Debian |
bionic |
Ignored
|
focal |
Ignored
|
|
groovy |
Ignored
|
|
hirsute |
Ignored
|
|
impish |
Ignored
|
|
jammy |
Ignored
|
|
kinetic |
Ignored
|
|
lunar |
Ignored
|
|
mantic |
Ignored
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
nvidia-graphics-drivers-440 Launchpad, Ubuntu, Debian |
bionic |
Ignored
|
focal |
Ignored
|
|
groovy |
Ignored
|
|
hirsute |
Ignored
|
|
impish |
Ignored
|
|
jammy |
Ignored
|
|
kinetic |
Ignored
|
|
lunar |
Ignored
|
|
mantic |
Ignored
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
nvidia-graphics-drivers-440-server Launchpad, Ubuntu, Debian |
bionic |
Ignored
|
focal |
Ignored
|
|
groovy |
Ignored
|
|
hirsute |
Ignored
|
|
impish |
Ignored
|
|
jammy |
Ignored
|
|
kinetic |
Ignored
|
|
lunar |
Ignored
|
|
mantic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
nvidia-graphics-drivers-450 Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
|
focal |
Not vulnerable
|
|
groovy |
Ignored
(end of life)
|
|
hirsute |
Not vulnerable
|
|
impish |
Not vulnerable
|
|
jammy |
Not vulnerable
|
|
kinetic |
Not vulnerable
|
|
lunar |
Not vulnerable
|
|
mantic |
Not vulnerable
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
nvidia-graphics-drivers-450-server Launchpad, Ubuntu, Debian |
bionic |
Released
(450.142.00-0ubuntu0.18.04.1)
|
focal |
Released
(450.142.00-0ubuntu0.20.04.1)
|
|
groovy |
Released
(450.142.00-0ubuntu0.20.10.1)
|
|
hirsute |
Released
(450.142.00-0ubuntu0.21.04.1)
|
|
impish |
Released
(450.142.00-0ubuntu1)
|
|
jammy |
Released
(450.142.00-0ubuntu1)
|
|
kinetic |
Released
(450.142.00-0ubuntu1)
|
|
lunar |
Released
(450.142.00-0ubuntu1)
|
|
mantic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
nvidia-graphics-drivers-455 Launchpad, Ubuntu, Debian |
bionic |
Ignored
|
focal |
Ignored
|
|
groovy |
Ignored
|
|
hirsute |
Ignored
|
|
impish |
Ignored
|
|
jammy |
Ignored
|
|
kinetic |
Ignored
|
|
lunar |
Ignored
|
|
mantic |
Ignored
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
nvidia-graphics-drivers-460 Launchpad, Ubuntu, Debian |
bionic |
Released
(460.91.03-0ubuntu0.18.04.1)
|
focal |
Released
(460.91.03-0ubuntu0.20.04.1)
|
|
groovy |
Released
(460.91.03-0ubuntu0.20.10.1)
|
|
hirsute |
Released
(460.91.03-0ubuntu0.21.04.1)
|
|
impish |
Released
(460.91.03-0ubuntu1)
|
|
jammy |
Released
(460.91.03-0ubuntu1)
|
|
kinetic |
Released
(460.91.03-0ubuntu1)
|
|
lunar |
Released
(460.91.03-0ubuntu1)
|
|
mantic |
Released
(460.91.03-0ubuntu1)
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
nvidia-graphics-drivers-460-server Launchpad, Ubuntu, Debian |
bionic |
Released
(460.91.03-0ubuntu0.18.04.1)
|
focal |
Released
(460.91.03-0ubuntu0.20.04.1)
|
|
groovy |
Released
(460.91.03-0ubuntu0.20.10.1)
|
|
hirsute |
Released
(460.91.03-0ubuntu0.21.04.1)
|
|
impish |
Released
(460.91.03-0ubuntu1)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
nvidia-graphics-drivers-470 Launchpad, Ubuntu, Debian |
bionic |
Released
(470.57.02-0ubuntu0.18.04.1)
|
focal |
Released
(470.57.02-0ubuntu0.20.04.1)
|
|
jammy |
Not vulnerable
(470.103.01-0ubuntu2)
|
|
lunar |
Not vulnerable
(470.103.01-0ubuntu2)
|
|
mantic |
Not vulnerable
(470.103.01-0ubuntu2)
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
Severity score breakdown
Parameter | Value |
---|---|
Base score | 5.5 |
Attack vector | Local |
Attack complexity | Low |
Privileges required | Low |
User interaction | None |
Scope | Unchanged |
Confidentiality | None |
Integrity impact | None |
Availability impact | High |
Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |