CVE-2020-5963
Publication date 24 June 2020
Last updated 24 July 2024
Ubuntu priority
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure.
From the Ubuntu Security Team
Thomas E. Carroll discovered that the NVIDIA Cuda grpahics driver did not properly perform access control when performing IPC. An attacker could use this to cause a denial of service or possibly execute arbitrary code.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| nvidia-graphics-drivers-390 | 20.04 LTS focal |
Fixed 390.138-0ubuntu0.20.04.1
|
| 18.04 LTS bionic |
Fixed 390.138-0ubuntu0.18.04.1
|
|
| 16.04 LTS xenial | Not in release | |
| 14.04 LTS trusty | Not in release | |
| nvidia-graphics-drivers-440 | 20.04 LTS focal |
Fixed 440.100-0ubuntu0.20.04.1
|
| 18.04 LTS bionic |
Fixed 440.100-0ubuntu0.18.04.1
|
|
| 16.04 LTS xenial | Not in release | |
| 14.04 LTS trusty | Not in release |
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score |
7.8 · High
|
| Attack vector | Local |
| Attack complexity | Low |
| Privileges required | Low |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality | High |
| Integrity impact | High |
| Availability impact | High |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
References
Related Ubuntu Security Notices (USN)
- USN-4404-2
- Linux kernel vulnerabilities
- 25 June 2020
- USN-4404-1
- NVIDIA graphics drivers vulnerabilities
- 25 June 2020