Vulnerability Details CVE-2021-1093
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in firmware where the driver contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary, and may lead to denial of service or system crash.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 21.3%
CVSS Severity
CVSS v3 Score 6.2
CVSS v2 Score 4.9
References
- https://lists.debian.org/debian-lts-announce/2022/01/msg00013.html
- https://nvidia.custhelp.com/app/answers/detail/a_id/5211
- https://security.gentoo.org/glsa/202310-02
- https://lists.debian.org/debian-lts-announce/2022/01/msg00013.html
- https://nvidia.custhelp.com/app/answers/detail/a_id/5211
- https://security.gentoo.org/glsa/202310-02
Products affected by CVE-2021-1093
-
cpe:2.3:a:nvidia:gpu_display_driver:418.197.02
-
cpe:2.3:a:nvidia:gpu_display_driver:427.33
-
cpe:2.3:a:nvidia:gpu_display_driver:450.119.03
-
cpe:2.3:a:nvidia:gpu_display_driver:452.96
-
cpe:2.3:a:nvidia:gpu_display_driver:460.73.01
-
cpe:2.3:a:nvidia:gpu_display_driver:462.31
-
cpe:2.3:a:nvidia:gpu_display_driver:462.59
-
cpe:2.3:o:debian:debian_linux:9.0