CVE-2019-5694: Medium severity nvidia gpu kernel driver vulnerability

Published Nov 9, 2019

Updated

NVIDIA Windows GPU Display Driver, R390 driver version, contains a vulnerability in NVIDIA Control Panel in which it incorrectly loads Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), which may lead to denial of service or information disclosure through code execution. The attacker requires local system access.

Affected Software

2 affected components

Nvidia GPU driver

Microsoft Windows

Remediation

Patch Available

https://nvidia.custhelp.com/app/answers/detail/a_id/4907

Event History

Nov 9, 2019

CVE Published

via MITRE·01:42 AM

Data Sourced

via MITRE·01:42 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2019-5694?

CVE-2019-5694 is a vulnerability in the NVIDIA Windows GPU Display Driver R390 driver version.

What is the severity of CVE-2019-5694?

The severity of CVE-2019-5694 is medium with a CVSS score of 6.5.

What software is affected by CVE-2019-5694?

The NVIDIA Windows GPU Display Driver R390 driver version is affected by CVE-2019-5694.

How does CVE-2019-5694 impact the system?

CVE-2019-5694 can lead to denial of service or information disclosure.

How can I fix CVE-2019-5694?

To fix CVE-2019-5694, update to the latest version of the NVIDIA Windows GPU Display Driver R390 driver.