NVD Vulnerability Detail

CVE-2016-7382

Summary	For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows or nvidia.ko for Linux) handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges.
Publication Date	Nov. 9, 2016, 5:59 a.m.
Registration Date	Jan. 26, 2021, 2:17 p.m.
Last Update	Nov. 21, 2024, 11:57 a.m.

CVSS3.0 : HIGH
スコア	7.8
Vector	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
攻撃元区分(AV)	ローカル
攻撃条件の複雑さ(AC)	低
攻撃に必要な特権レベル(PR)	低
利用者の関与(UI)	不要
影響の想定範囲(S)	変更なし
機密性への影響(C)	高
完全性への影響(I)	高
可用性への影響(A)	高

CVSS2.0 : HIGH
Score	7.2
Vector	AV:L/AC:L/Au:N/C:C/I:C/A:C
攻撃元区分(AV)	ローカル
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	高
完全性への影響(I)	高
可用性への影響(A)	高
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:nvidia:gpu_driver:304.131:::::::*
cpe:2.3:a:nvidia:gpu_driver:340.98:::::::*
cpe:2.3:a:nvidia:gpu_driver:361.93.02:::::::*
cpe:2.3:a:nvidia:gpu_driver:367.44:::::::*
cpe:2.3:a:nvidia:gpu_driver:367.54:::::::*
cpe:2.3:a:nvidia:gpu_driver:370.23:::::::*
execution environment
1	cpe:2.3:h:nvidia:geforce_910m:-:::::::*
2	cpe:2.3:h:nvidia:geforce_920m:-:::::::*
3	cpe:2.3:h:nvidia:geforce_920mx:-:::::::*
4	cpe:2.3:h:nvidia:geforce_930m:-:::::::*
5	cpe:2.3:h:nvidia:geforce_930mx:-:::::::*
6	cpe:2.3:h:nvidia:geforce_940m:-:::::::*
7	cpe:2.3:h:nvidia:geforce_940mx:-:::::::*
8	cpe:2.3:h:nvidia:geforce_945m:-:::::::*
9	cpe:2.3:h:nvidia:geforce_gt_710:-:::::::*
10	cpe:2.3:h:nvidia:geforce_gt_730:-:::::::*
11	cpe:2.3:h:nvidia:geforce_gtx_1050:-:::::::*
12	cpe:2.3:h:nvidia:geforce_gtx_1060:-:::::::*
13	cpe:2.3:h:nvidia:geforce_gtx_1070:-:::::::*
14	cpe:2.3:h:nvidia:geforce_gtx_1080:-:::::::*
15	cpe:2.3:h:nvidia:geforce_gtx_950m:-:::::::*
16	cpe:2.3:h:nvidia:geforce_gtx_960m:-:::::::*
17	cpe:2.3:h:nvidia:geforce_gtx_965m:-:::::::*
18	cpe:2.3:h:nvidia:nvs_310:-:::::::*
19	cpe:2.3:h:nvidia:nvs_315:-:::::::*
20	cpe:2.3:h:nvidia:nvs_510:-:::::::*
21	cpe:2.3:h:nvidia:nvs_810:-:::::::*
22	cpe:2.3:h:nvidia:quadro_k1200:-:::::::*
23	cpe:2.3:h:nvidia:quadro_k420:-:::::::*
24	cpe:2.3:h:nvidia:quadro_k620:-:::::::*
25	cpe:2.3:h:nvidia:quadro_m1000m:-:::::::*
26	cpe:2.3:h:nvidia:quadro_m2000:-:::::::*
27	cpe:2.3:h:nvidia:quadro_m2000m:-:::::::*
28	cpe:2.3:h:nvidia:quadro_m3000m:-:::::::*
29	cpe:2.3:h:nvidia:quadro_m4000:-:::::::*
30	cpe:2.3:h:nvidia:quadro_m4000m:-:::::::*
31	cpe:2.3:h:nvidia:quadro_m5000:-:::::::*
32	cpe:2.3:h:nvidia:quadro_m5000m:-:::::::*
33	cpe:2.3:h:nvidia:quadro_m500m:-:::::::*
34	cpe:2.3:h:nvidia:quadro_m5500:-:::::::*
35	cpe:2.3:h:nvidia:quadro_m6000:-:::::::*
36	cpe:2.3:h:nvidia:quadro_m600m:-:::::::*
37	cpe:2.3:h:nvidia:quadro_p5000:-:::::::*
38	cpe:2.3:h:nvidia:quadro_p6000:-:::::::*
39	cpe:2.3:h:nvidia:telsa_k80:-:::::::*
40	cpe:2.3:h:nvidia:tesla_c2050:-:::::::*
41	cpe:2.3:h:nvidia:tesla_c2070:-:::::::*
42	cpe:2.3:h:nvidia:tesla_c2075:-:::::::*
43	cpe:2.3:h:nvidia:tesla_k10:-:::::::*
44	cpe:2.3:h:nvidia:tesla_k20:-:::::::*
45	cpe:2.3:h:nvidia:tesla_k20x:-:::::::*
46	cpe:2.3:h:nvidia:tesla_k40:-:::::::*
47	cpe:2.3:h:nvidia:tesla_k8:-:::::::*
48	cpe:2.3:h:nvidia:tesla_k80:-:::::::*
49	cpe:2.3:h:nvidia:tesla_m2050:-:::::::*
50	cpe:2.3:h:nvidia:tesla_m2070:-:::::::*
51	cpe:2.3:h:nvidia:tesla_m2075:-:::::::*
52	cpe:2.3:h:nvidia:tesla_m2090:-:::::::*
53	cpe:2.3:h:nvidia:tesla_m40:-:::::::*
54	cpe:2.3:h:nvidia:tesla_m6:-:::::::*
55	cpe:2.3:h:nvidia:tesla_m60:-:::::::*
56	cpe:2.3:h:nvidia:tesla_p100:-:::::::*
57	cpe:2.3:h:nvidia:tesla_p4:-:::::::*
58	cpe:2.3:h:nvidia:tesla_p40:-:::::::*
59	cpe:2.3:h:nvidia:titan_x:-:::::::*

Related information, measures and tools

No	URL	タグ
1	http://nvidia.custhelp.com/app/answers/detail/a_id/4246	Patch Vendor Advisory
2	http://nvidia.custhelp.com/app/answers/detail/a_id/4246	Patch Vendor Advisory
3	http://nvidia.custhelp.com/app/answers/detail/a_id/4247	Patch Vendor Advisory
4	http://nvidia.custhelp.com/app/answers/detail/a_id/4247	Patch Vendor Advisory
5	http://www.securityfocus.com/bid/94177	Third Party Advisory VDB Entry
6	http://www.securityfocus.com/bid/94177	Third Party Advisory VDB Entry
7	https://support.lenovo.com/us/en/solutions/LEN-10822
8	https://support.lenovo.com/us/en/solutions/LEN-10822

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-275	パーミッションの問題	https://cwe.mitre.org/data/definitions/275.html

JVN Vulnerability Information

複数の NVIDIA 製品の GPU ディスプレイドライバにおけるアクセス権を取得される脆弱性

Title	複数の NVIDIA 製品の GPU ディスプレイドライバにおけるアクセス権を取得される脆弱性
Summary	NVIDIA Quadro、NVS、GeForce、および Tesla の GPU ディスプレイドライバには、任意の物理メモリへのアクセス権を取得され、その結果、権限昇格の脆弱性が存在します。補足情報 : CWE による脆弱性タイプは、CWE-275: Permission Issues (パーミッションの問題) と識別されています。 https://cwe.mitre.org/data/definitions/275.html
Possible impacts	任意の物理メモリへのアクセス権を取得され、その結果、権限昇格の可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Oct. 19, 2016, midnight
Registration Date	Nov. 14, 2016, 3:56 p.m.
Last Update	Nov. 14, 2016, 3:56 p.m.

Affected System

NVIDIA

NVIDIA GPU ディスプレイドライバ (Windows)

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2016-7382	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7382
National Vulnerability Database (NVD)
2	CVE-2016-7382	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7382

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-Other	https://www.ipa.go.jp/security/vuln/CWE.html#CWEOther

ベンダー情報

No	Name	URL
NVIDIA SUPPORT
1	Security Bulletin: NVIDIA Linux GPU Display Driver contains missing permissions check and improper validation vulnerabilities (CVE-2016-7382, CVE-2016-7389)	http://nvidia.custhelp.com/app/answers/detail/a_id/4246
2	Security Bulletin: Vulnerabilities in NVIDIA Windows GPU Display Driver and NVIDIA GeForce Experience	http://nvidia.custhelp.com/app/answers/detail/a_id/4247

Change Log

No	Changed Details	Date of change
0	[2016年11月14日] 掲載	Feb. 17, 2018, 10:37 a.m.

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:nvidia:gpu_driver:304.131:::::::*
cpe:2.3:a:nvidia:gpu_driver:340.98:::::::*
cpe:2.3:a:nvidia:gpu_driver:361.93.02:::::::*
cpe:2.3:a:nvidia:gpu_driver:367.44:::::::*
cpe:2.3:a:nvidia:gpu_driver:367.54:::::::*
cpe:2.3:a:nvidia:gpu_driver:370.23:::::::*
execution environment
1	cpe:2.3:h:nvidia:geforce_910m:-:::::::*
2	cpe:2.3:h:nvidia:geforce_920m:-:::::::*
3	cpe:2.3:h:nvidia:geforce_920mx:-:::::::*
4	cpe:2.3:h:nvidia:geforce_930m:-:::::::*
5	cpe:2.3:h:nvidia:geforce_930mx:-:::::::*
6	cpe:2.3:h:nvidia:geforce_940m:-:::::::*
7	cpe:2.3:h:nvidia:geforce_940mx:-:::::::*
8	cpe:2.3:h:nvidia:geforce_945m:-:::::::*
9	cpe:2.3:h:nvidia:geforce_gt_710:-:::::::*
10	cpe:2.3:h:nvidia:geforce_gt_730:-:::::::*
11	cpe:2.3:h:nvidia:geforce_gtx_1050:-:::::::*
12	cpe:2.3:h:nvidia:geforce_gtx_1060:-:::::::*
13	cpe:2.3:h:nvidia:geforce_gtx_1070:-:::::::*
14	cpe:2.3:h:nvidia:geforce_gtx_1080:-:::::::*
15	cpe:2.3:h:nvidia:geforce_gtx_950m:-:::::::*
16	cpe:2.3:h:nvidia:geforce_gtx_960m:-:::::::*
17	cpe:2.3:h:nvidia:geforce_gtx_965m:-:::::::*
18	cpe:2.3:h:nvidia:nvs_310:-:::::::*
19	cpe:2.3:h:nvidia:nvs_315:-:::::::*
20	cpe:2.3:h:nvidia:nvs_510:-:::::::*
21	cpe:2.3:h:nvidia:nvs_810:-:::::::*
22	cpe:2.3:h:nvidia:quadro_k1200:-:::::::*
23	cpe:2.3:h:nvidia:quadro_k420:-:::::::*
24	cpe:2.3:h:nvidia:quadro_k620:-:::::::*
25	cpe:2.3:h:nvidia:quadro_m1000m:-:::::::*
26	cpe:2.3:h:nvidia:quadro_m2000:-:::::::*
27	cpe:2.3:h:nvidia:quadro_m2000m:-:::::::*
28	cpe:2.3:h:nvidia:quadro_m3000m:-:::::::*
29	cpe:2.3:h:nvidia:quadro_m4000:-:::::::*
30	cpe:2.3:h:nvidia:quadro_m4000m:-:::::::*
31	cpe:2.3:h:nvidia:quadro_m5000:-:::::::*
32	cpe:2.3:h:nvidia:quadro_m5000m:-:::::::*
33	cpe:2.3:h:nvidia:quadro_m500m:-:::::::*
34	cpe:2.3:h:nvidia:quadro_m5500:-:::::::*
35	cpe:2.3:h:nvidia:quadro_m6000:-:::::::*
36	cpe:2.3:h:nvidia:quadro_m600m:-:::::::*
37	cpe:2.3:h:nvidia:quadro_p5000:-:::::::*
38	cpe:2.3:h:nvidia:quadro_p6000:-:::::::*
39	cpe:2.3:h:nvidia:telsa_k80:-:::::::*
40	cpe:2.3:h:nvidia:tesla_c2050:-:::::::*
41	cpe:2.3:h:nvidia:tesla_c2070:-:::::::*
42	cpe:2.3:h:nvidia:tesla_c2075:-:::::::*
43	cpe:2.3:h:nvidia:tesla_k10:-:::::::*
44	cpe:2.3:h:nvidia:tesla_k20:-:::::::*
45	cpe:2.3:h:nvidia:tesla_k20x:-:::::::*
46	cpe:2.3:h:nvidia:tesla_k40:-:::::::*
47	cpe:2.3:h:nvidia:tesla_k8:-:::::::*
48	cpe:2.3:h:nvidia:tesla_k80:-:::::::*
49	cpe:2.3:h:nvidia:tesla_m2050:-:::::::*
50	cpe:2.3:h:nvidia:tesla_m2070:-:::::::*
51	cpe:2.3:h:nvidia:tesla_m2075:-:::::::*
52	cpe:2.3:h:nvidia:tesla_m2090:-:::::::*
53	cpe:2.3:h:nvidia:tesla_m40:-:::::::*
54	cpe:2.3:h:nvidia:tesla_m6:-:::::::*
55	cpe:2.3:h:nvidia:tesla_m60:-:::::::*
56	cpe:2.3:h:nvidia:tesla_p100:-:::::::*
57	cpe:2.3:h:nvidia:tesla_p4:-:::::::*
58	cpe:2.3:h:nvidia:tesla_p40:-:::::::*
59	cpe:2.3:h:nvidia:titan_x:-:::::::*