CVE-2023-0191: Buffer Overflow
First published: Sat Apr 01 2023(Updated: )
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds access may lead to denial of service or data tampering.
Credit: psirt@nvidia.com psirt@nvidia.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NVIDIA Virtual GPU | <11.12 | |
| NVIDIA Virtual GPU | >=13.0<13.7 | |
| NVIDIA Virtual GPU | >=15.0<15.2 | |
| Citrix Hypervisor | ||
| Linux Linux kernel | ||
| Microsoft Windows | ||
| Redhat Enterprise Linux Kernel-based Virtual Machine | ||
| VMware vSphere |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for the NVIDIA GPU Display Driver for Windows and Linux vulnerability?
The vulnerability ID for this NVIDIA GPU Display Driver vulnerability is CVE-2023-0191.
What is the severity level of the CVE-2023-0191 vulnerability?
The severity level of the CVE-2023-0191 vulnerability is high, with a value of 7.1.
What is the affected software for the CVE-2023-0191 vulnerability?
The affected software for the CVE-2023-0191 vulnerability includes Nvidia Virtual Gpu versions 11.12 up to exclusive, versions 13.0 to 13.7 between inclusive and exclusive, and versions 15.0 to 15.2 between inclusive and exclusive.
What are the potential impacts of the CVE-2023-0191 vulnerability?
The potential impacts of the CVE-2023-0191 vulnerability include denial of service and data tampering.
Where can I find more information about the CVE-2023-0191 vulnerability?
You can find more information about the CVE-2023-0191 vulnerability at the following references: [NVIDIA Customer Support](https://nvidia.custhelp.com/app/answers/detail/a_id/5452) and [Gentoo Linux Security Advisory](https://security.gentoo.org/glsa/202310-02).
- collector/nvd-api
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/nvidia
- canonical/nvidia virtual gpu
- version/nvidia virtual gpu/13.0
- version/nvidia virtual gpu/15.0
- vendor/citrix
- canonical/citrix hypervisor
- vendor/linux
- canonical/linux linux kernel
- vendor/microsoft
- canonical/microsoft windows
- vendor/redhat
- canonical/redhat enterprise linux kernel-based virtual machine
- vendor/vmware
- canonical/vmware vsphere