CVE-2021-1053 - OpenCVE

NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape or IOCTL in which improper validation of a user pointer may lead to denial of service.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

AV:L/AC:L/Au:N/C:N/I:N/A:P

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Kernel
Microsoft	Windows
Nvidia	Gpu Driver

Configuration 1 [-]

AND

OR	cpe:2.3:a:nvidia:gpu_driver::::::::
	cpe:2.3:a:nvidia:gpu_driver::::::::
	cpe:2.3:a:nvidia:gpu_driver::::::::
	cpe:2.3:a:nvidia:gpu_driver::::::::

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

OR	cpe:2.3:a:nvidia:gpu_driver::::::::
	cpe:2.3:a:nvidia:gpu_driver::::::::
	cpe:2.3:a:nvidia:gpu_driver::::::::

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://nvidia.custhelp.com/app/answers/detail/a_id/5142
https://security.gentoo.org/glsa/202310-02

History

No history.

MITRE

Status: PUBLISHED

Assigner: nvidia

Published: 2021-01-08T00:00:00

Updated: 2024-08-03T15:55:18.482Z

Reserved: 2020-11-12T00:00:00

Link: CVE-2021-1053

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2021-01-08T01:15:14.463

Modified: 2023-10-13T01:36:20.580

Link: CVE-2021-1053

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*", "matchCriteriaId": "232441BD-1864-44BB-9E98-8E23B53B4D09", "versionEndExcluding": "392.63", "versionStartIncluding": "390", "vulnerable": true}, {"criteria": "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*", "matchCriteriaId": "F3F9EE41-66A0-4A36-9B22-4F2FCC2647C4", "versionEndExcluding": "427.11", "versionStartIncluding": "418", "vulnerable": true}, {"criteria": "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*", "matchCriteriaId": "51520B29-811E-49A8-AEA0-55EBD4C557F1", "versionEndExcluding": "452.77", "versionStartIncluding": "450", "vulnerable": true}, {"criteria": "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*", "matchCriteriaId": "05BEB8FB-E490-4E05-A6D6-0BAE65F67284", "versionEndExcluding": "461.09", "versionStartIncluding": "460", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*", "matchCriteriaId": "D3F8BB68-C2C5-4F08-83C8-4FA15820F340", "versionEndExcluding": "390.141", "versionStartIncluding": "390", "vulnerable": true}, {"criteria": "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*", "matchCriteriaId": "9549CBBA-2F6F-4A64-8E5B-7717332F74DE", "versionEndExcluding": "450.102.04", "versionStartIncluding": "450", "vulnerable": true}, {"criteria": "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*", "matchCriteriaId": "81372853-B278-4AEE-A014-8238B4D4E338", "versionEndExcluding": "460.32.03", "versionStartIncluding": "460", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape or IOCTL in which improper validation of a user pointer may lead to denial of service."}, {"lang": "es", "value": "NVIDIA GPU Display Driver para Windows y Linux, todas las versiones, contiene una vulnerabilidad en el manejador de la capa del modo kernel (nvlddmkm.sys) para la funci\u00f3n DxgkDdiEscape o IOCTL en la que la comprobaci\u00f3n inapropiada de un puntero de usuario puede conllevar a una denegaci\u00f3n de servicio"}], "id": "CVE-2021-1053", "lastModified": "2023-10-13T01:36:20.580", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 2.1, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-01-08T01:15:14.463", "references": [{"source": "psirt@nvidia.com", "tags": ["Vendor Advisory"], "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5142"}, {"source": "psirt@nvidia.com", "tags": ["Third Party Advisory"], "url": "https://security.gentoo.org/glsa/202310-02"}], "sourceIdentifier": "psirt@nvidia.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}]}