Sign-up

ID

VAR-201611-0005


CVE

CVE-2016-4959


TITLE

plural NVIDIA Denial of service in products (DoS) Vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2016-005836

DESCRIPTION

For the NVIDIA Quadro, NVS, and GeForce products, there is a Remote Desktop denial of service. A successful exploit of a vulnerable system will result in a kernel null pointer dereference, causing a blue screen crash. Supplementary information : CWE Vulnerability types by CWE-476: NULL Pointer Dereference (NULL Pointer dereferencing ) Has been identified. Multiple NVIDIA products are prone to a denial-of-service vulnerability

Trust: 1.89

sources: NVD: CVE-2016-4959 // JVNDB: JVNDB-2016-005836 // BID: 93256

AFFECTED PRODUCTS

vendor:nvidiamodel:gpu driverscope:gteversion:352.0

Trust: 1.0

vendor:nvidiamodel:gpu driverscope:ltversion:362.77

Trust: 1.0

vendor:nvidiamodel:gpu driverscope:gteversion:367

Trust: 1.0

vendor:nvidiamodel:gpu driverscope:ltversion:341.96

Trust: 1.0

vendor:nvidiamodel:gpu driverscope:ltversion:354.99

Trust: 1.0

vendor:nvidiamodel:gpu driverscope:ltversion:368.39

Trust: 1.0

vendor:nvidiamodel:gpu driverscope:gteversion:361

Trust: 1.0

vendor:nvidiamodel:gpu driverscope:gteversion:340

Trust: 1.0

vendor:nvidiamodel:gpu display driverscope:eqversion:(windows)

Trust: 0.8

vendor:nvidiamodel:gpu driverscope:eqversion:354.74

Trust: 0.6

vendor:nvidiamodel:gpu driverscope:eqversion:368.22

Trust: 0.6

vendor:nvidiamodel:gpu driverscope:eqversion:362.00

Trust: 0.6

vendor:nvidiamodel:gpu driverscope:eqversion:368.39

Trust: 0.6

vendor:nvidiamodel:gpu driverscope:eqversion:341.95

Trust: 0.6

vendor:nvidiamodel:quadro r367scope:eqversion:0

Trust: 0.3

vendor:nvidiamodel:quadro r361scope:eqversion:0

Trust: 0.3

vendor:nvidiamodel:quadro r352scope:eqversion:0

Trust: 0.3

vendor:nvidiamodel:quadro r340scope:eqversion:0

Trust: 0.3

vendor:nvidiamodel:nvs r367scope:eqversion:0

Trust: 0.3

vendor:nvidiamodel:nvs r361scope:eqversion:0

Trust: 0.3

vendor:nvidiamodel:nvs r352scope:eqversion:0

Trust: 0.3

vendor:nvidiamodel:nvs r340scope:eqversion:0

Trust: 0.3

vendor:nvidiamodel:geforce r367scope:eqversion:0

Trust: 0.3

vendor:nvidiamodel:geforce r340scope:eqversion:0

Trust: 0.3

vendor:lenovomodel:thinkstationscope:eqversion:0

Trust: 0.3

vendor:lenovomodel:thinkserverscope:eqversion:0

Trust: 0.3

vendor:lenovomodel:thinkpadscope:eqversion:0

Trust: 0.3

vendor:lenovomodel:systemscope:eqversion:x0

Trust: 0.3

vendor:lenovomodel:ideapadscope:eqversion:0

Trust: 0.3

vendor:lenovomodel:desktopscope:eqversion:0

Trust: 0.3

vendor:ibmmodel:systemscope:eqversion:x0

Trust: 0.3

vendor:nvidiamodel:quadro r367scope:neversion:368.39

Trust: 0.3

vendor:nvidiamodel:quadro r361scope:neversion:362.77

Trust: 0.3

vendor:nvidiamodel:quadro r352scope:neversion:354.99

Trust: 0.3

vendor:nvidiamodel:quadro r340scope:neversion:341.96

Trust: 0.3

vendor:nvidiamodel:nvs r367scope:neversion:368.39

Trust: 0.3

vendor:nvidiamodel:nvs r361scope:neversion:362.77

Trust: 0.3

vendor:nvidiamodel:nvs r352scope:neversion:354.99

Trust: 0.3

vendor:nvidiamodel:nvs r340scope:neversion:341.96

Trust: 0.3

vendor:nvidiamodel:geforce r367scope:neversion:368.69

Trust: 0.3

vendor:nvidiamodel:geforce r340scope:neversion:341.96

Trust: 0.3

sources: BID: 93256 // JVNDB: JVNDB-2016-005836 // CNNVD: CNNVD-201610-121 // NVD: CVE-2016-4959

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2016-4959
value: HIGH

Trust: 1.0

NVD: CVE-2016-4959
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201610-121
value: HIGH

Trust: 0.6

nvd@nist.gov: CVE-2016-4959
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

nvd@nist.gov: CVE-2016-4959
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 3.6
version: 3.0

Trust: 1.8

sources: JVNDB: JVNDB-2016-005836 // CNNVD: CNNVD-201610-121 // NVD: CVE-2016-4959

PROBLEMTYPE DATA

problemtype:CWE-476

Trust: 1.0

problemtype:CWE-Other

Trust: 0.8

sources: JVNDB: JVNDB-2016-005836 // NVD: CVE-2016-4959

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201610-121

TYPE

code problem

Trust: 0.6

sources: CNNVD: CNNVD-201610-121

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2016-005836

PATCH
title:Security Bulletin: Multiple vulnerabilities affect Quadro, NVS, and GeForce Windows based systemsurl:http://nvidia.custhelp.com/app/answers/detail/a_id/4213
Trust: 0.8
title:NVIDIA Quadro , NVS  and GeForce Remediation measures for denial of service vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=65290
Trust: 0.6
title:NVIDIA Quadro , NVS  and GeForce Remediation measures for denial of service vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=65439
Trust: 0.6
sources:
            
            
            JVNDB: JVNDB-2016-005836 // 
            
            
            
            CNNVD: CNNVD-201610-121

EXTERNAL IDS
db:NVDid:CVE-2016-4959
Trust: 2.7
db:BIDid:93256
Trust: 1.9
db:JVNDBid:JVNDB-2016-005836
Trust: 0.8
db:CNNVDid:CNNVD-201610-121
Trust: 0.6
sources:
            
            
            BID: 93256 // 
            
            
            
            JVNDB: JVNDB-2016-005836 // 
            
            
            
            CNNVD: CNNVD-201610-121 // 
            
            
            
            NVD: CVE-2016-4959

REFERENCES
url:https://support.lenovo.com/us/en/product_security/ps500070
Trust: 1.9
url:http://www.tripwire.com/state-of-security/vulnerability-management/warning-this-post-contains-graphic-nvidia-content/
Trust: 1.6
url:http://www.securityfocus.com/bid/93256
Trust: 1.6
url:http://nvidia.custhelp.com/app/answers/detail/a_id/4213
Trust: 1.6
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-4959
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-4959
Trust: 0.8
url:http://www.nvidia.com
Trust: 0.3
url:http://nvidia.custhelp.com/app/answers/detail/a_id/4213/~/security-bulletin%3a-multiple-vulnerabilities-affect-quadro,-nvs,-and-geforce
Trust: 0.3
sources:
            
            
            BID: 93256 // 
            
            
            
            JVNDB: JVNDB-2016-005836 // 
            
            
            
            CNNVD: CNNVD-201610-121 // 
            
            
            
            NVD: CVE-2016-4959

CREDITS
Tripwire VERT
Trust: 0.3
sources:
            
            
            BID: 93256

SOURCES
db:BIDid:93256
db:JVNDBid:JVNDB-2016-005836
db:CNNVDid:CNNVD-201610-121
db:NVDid:CVE-2016-4959

LAST UPDATE DATE
2024-11-23T22:34:47.497000+00:00

SOURCES UPDATE DATE
db:BIDid:93256date:2016-10-03T00:03:00
db:JVNDBid:JVNDB-2016-005836date:2016-11-14T00:00:00
db:CNNVDid:CNNVD-201610-121date:2019-05-31T00:00:00
db:NVDid:CVE-2016-4959date:2024-11-21T02:53:18.320

SOURCES RELEASE DATE
db:BIDid:93256date:2016-09-30T00:00:00
db:JVNDBid:JVNDB-2016-005836date:2016-11-14T00:00:00
db:CNNVDid:CNNVD-201610-121date:2016-09-29T00:00:00
db:NVDid:CVE-2016-4959date:2016-11-08T20:59:01.397