CVE-2018-3979
Description
A remote denial-of-service vulnerability exists in the way the Nouveau Display Driver (the default Ubuntu Nvidia display driver) handles GPU shader execution. A specially crafted pixel shader can cause remote denial-of-service issues. An attacker can provide a specially crafted website to trigger this vulnerability. This vulnerability can be triggered remotely after the user visits a malformed website. No further user interaction is required. Vulnerable versions include Ubuntu 18.04 LTS (linux 4.15.0-29-generic x86_64), Nouveau Display Driver NV117 (vermagic: 4.15.0-29-generic SMP mod_unload).
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| canonical ubuntu_linux | 18.04 | — |
| nvidia geforce_gtx_745_firmware | No range specified | — |
| nvidia geforce_gtx_750_firmware | No range specified | — |
| nvidia geforce_gtx_750_ti_firmware | No range specified | — |
| nvidia geforce_gtx_840m_firmware | No range specified | — |
| nvidia geforce_gtx_845m_firmware | No range specified | — |
| nvidia geforce_gtx_850m_firmware | No range specified | — |
| nvidia geforce_gtx_860m_firmware | No range specified | — |
| nvidia geforce_gtx_950m_firmware | No range specified | — |
| nvidia geforce_gtx_960m_firmware | No range specified | — |
| nvidia quadro_k620_firmware | No range specified | — |
| nvidia quadro_k1200_firmware | No range specified | — |
| nvidia quadro_k2200_firmware | No range specified | — |
| nvidia quadro_m1000m_firmware | No range specified | — |
| nvidia quadro_m1200m_firmware | No range specified | — |
| nvidia grid_m30_firmware | No range specified | — |
| nvidia grid_m40_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.