Out-of-bounds Write Affecting nvidia-graphics-drivers-tesla-470 package, versions <470.129.06-1


Severity

Recommended
0.0
critical
0
10

Snyk's Security Team recommends NVD's CVSS assessment. Learn more

Threat Intelligence

EPSS
0.15% (53rd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-DEBIAN13-NVIDIAGRAPHICSDRIVERSTESLA470-5691166
  • published18 May 2022
  • disclosed17 May 2022

Introduced: 17 May 2022

CVE-2022-28181  (opens in a new tab)
CWE-787  (opens in a new tab)

How to fix?

Upgrade Debian:13 nvidia-graphics-drivers-tesla-470 to version 470.129.06-1 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream nvidia-graphics-drivers-tesla-470 package and not the nvidia-graphics-drivers-tesla-470 package as distributed by Debian. See How to fix? for Debian:13 relevant fixed versions and status.

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. The scope of the impact may extend to other components.

CVSS Scores

version 3.1