CVE-2022-34676

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read may lead to denial of service, information disclosure, or data tampering.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*
OR cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*
cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:a:nvidia:cloud_gaming:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:a:nvidia:cloud_gaming:*:*:*:*:*:*:*:*
OR cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*

History

19 Oct 2023, 01:12

Type Values Removed Values Added
References (GENTOO) https://security.gentoo.org/glsa/202310-02 - (GENTOO) https://security.gentoo.org/glsa/202310-02 - Third Party Advisory

03 Oct 2023, 15:15

Type Values Removed Values Added
References
  • (GENTOO) https://security.gentoo.org/glsa/202310-02 -

06 Jan 2023, 20:40

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.8
First Time Nvidia
Nvidia cloud Gaming
Citrix hypervisor
Redhat
Citrix
Linux
Linux linux Kernel
Vmware
Nvidia virtual Gpu
Vmware vsphere
Redhat enterprise Linux Kernel-based Virtual Machine
CWE CWE-125
CPE cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*
cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:cloud_gaming:*:*:*:*:*:*:*:*
cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*
References (MISC) https://nvidia.custhelp.com/app/answers/detail/a_id/5415 - (MISC) https://nvidia.custhelp.com/app/answers/detail/a_id/5415 - Vendor Advisory

30 Dec 2022, 23:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-12-30 23:15

Updated : 2023-12-10 14:48


NVD link : CVE-2022-34676

Mitre link : CVE-2022-34676

CVE.ORG link : CVE-2022-34676


JSON object : View

Products Affected

nvidia

  • virtual_gpu
  • cloud_gaming

redhat

  • enterprise_linux_kernel-based_virtual_machine

linux

  • linux_kernel

citrix

  • hypervisor

vmware

  • vsphere
CWE
CWE-125

Out-of-bounds Read

CWE-197

Numeric Truncation Error