rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-0308 
All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where untrusted input is used for buffer size calculation leading to denial of service or escalation of privileges.
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: Windows GPU Display Driver
Published: 2017-02-15T23:00:00.000Z
CVE-2017-0309 
All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where multiple integer overflows may cause improper memory allocation leading to a denial of service or potential escalation of privileges.
Problem types: description: Denial of Service and possible Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2017-02-15T23:00:00.000Z
CVE-2017-0310 
All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper access controls allowing unprivileged user to cause a denial of service.
Problem types: description: Denial of Service
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2017-02-15T23:00:00.000Z
CVE-2017-0311 
NVIDIA GPU Display Driver R378 contains a vulnerability in the kernel mode layer handler where improper access control may lead to denial of service or possible escalation of privileges.
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2017-02-15T23:00:00.000Z
CVE-2017-0312 
All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscapeID 0x100008b where user provided input is used as the limit for a loop may lead to denial of service or potential escalation of privileges
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: Windows GPU Display Driver
Published: 2017-02-15T23:00:00.000Z
CVE-2017-0313 
All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) implementation of the SubmitCommandVirtual DDI (DxgkDdiSubmitCommandVirtual) where untrusted input is used to reference memory outside of the intended boundary of the buffer leading to denial of service or escalation of privileges.
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: Windows GPU Display Driver
Published: 2017-02-15T23:00:00.000Z
CVE-2017-0314 
All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) implementation of the SubmitCommandVirtual DDI (DxgkDdiSubmitCommandVirtual) where untrusted input is used to reference memory outside of the intended boundary of the buffer leading to denial of service or escalation of privileges.
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: Windows GPU Display Driver
Published: 2017-02-15T23:00:00.000Z
CVE-2017-0315 
All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where an attempt to access an invalid object pointer may lead to denial of service or potential escalation of privileges.
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: Windows GPU Display Driver
Published: 2017-02-15T23:00:00.000Z
CVE-2017-0316 
In GeForce Experience (GFE) 3.x before 3.10.0.55, NVIDIA Installer Framework contains a vulnerability in NVISystemService64 where a value passed from a user to the driver is used without validation, which may lead to denial of service or possible escalation of privileges.
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: GeForce Experience
Published: 2017-10-16T21:00:00.000Z
CVE-2017-0317 
All versions of NVIDIA GPU and GeForce Experience installer contain a vulnerability where it fails to set proper permissions on the package extraction path thus allowing a non-privileged user to tamper with the extracted files, potentially leading to escalation of privileges via code execution.
Problem types: description: Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: Windows GPU Display Driver
Published: 2017-02-15T23:00:00.000Z
CVE-2017-0318 
All versions of NVIDIA Linux GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper validation of an input parameter may cause a denial of service on the system.
Problem types: description: Denial of Service
Affected products: vendor: Nvidia Corporation
product: Linux GPU Display Driver
Published: 2017-02-15T23:00:00.000Z
CVE-2017-0319 
All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper handling of values may cause a denial of service on the system.
Problem types: description: Denial of Service (BSOD)
Affected products: vendor: Nvidia Corporation
product: Windows GPU Display Driver
Published: 2017-02-15T23:00:00.000Z
CVE-2017-0320 
All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper handling of values may cause a denial of service on the system.
Problem types: description: Denial of Service (BSOD)
Affected products: vendor: Nvidia Corporation
product: Windows GPU Display Driver
Published: 2017-02-15T23:00:00.000Z
CVE-2017-0321 
All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges.
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2017-02-15T23:00:00.000Z
CVE-2017-0322 
All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler where a value passed from a user to the driver is not correctly validated and used as the index to an array, leading to denial of service or potential escalation of privileges.
Problem types: description: Denial of Service (BSOD), Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: Windows GPU Display Driver
Published: 2017-02-15T23:00:00.000Z
CVE-2017-0323 
All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges.
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2017-02-15T23:00:00.000Z
CVE-2017-0324 
All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the size of an input buffer is not validated, leading to denial of service or potential escalation of privileges.
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: Windows GPU Display Driver
Published: 2017-02-15T23:00:00.000Z
CVE-2017-0325 
An elevation of privilege vulnerability in the NVIDIA I2C HID driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10 and Kernel 3.18. Android ID: A-33040280. References: N-CVE-2017-0325.
Problem types: description: Elevation of privilege
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2017-04-05T14:00:00.000Z
CVE-2017-0326 
An information disclosure vulnerability in the NVIDIA Video Driver due to an out-of-bounds read function in the Tegra Display Controller driver could result in possible information disclosure. This issue is rated as Moderate. Product: Android. Version: N/A. Android ID: A-33718700. References: N-CVE-2017-0326.
Problem types: description: Information Disclosure
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2017-07-07T14:00:00.000Z
CVE-2017-0327 
An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10. Android ID: A-33893669. References: N-CVE-2017-0327.
Problem types: description: Elevation of privilege
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2017-04-05T14:00:00.000Z
CVE-2017-0328 
An information disclosure vulnerability in the NVIDIA crypto driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10. Android ID: A-33898322. References: N-CVE-2017-0328.
Problem types: description: Information disclosure
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2017-04-05T14:00:00.000Z
CVE-2017-0329 
An elevation of privilege vulnerability in the NVIDIA boot and power management processor driver could enable a local malicious application to execute arbitrary code within the context of the boot and power management processor. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.18. Android ID:A-34115304. References: N-CVE-2017-0329.
Problem types: description: Elevation of privilege
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2017-04-05T14:00:00.000Z
CVE-2017-0330 
An information disclosure vulnerability in the NVIDIA crypto driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10. Android ID: A-33899858. References: N-CVE-2017-0330.
Problem types: description: Information disclosure
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2017-04-05T14:00:00.000Z
CVE-2017-0331 
An elevation of privilege vulnerability in the NVIDIA video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel 3.10. Android ID: A-34113000. References: N-CVE-2017-0331.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-02T21:00:00.000Z
CVE-2017-0332 
An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10. Android ID: A-33812508. References: N-CVE-2017-0332.
Problem types: description: Elevation of privilege
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2017-04-05T14:00:00.000Z
CVE-2017-0333 
An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-33899363. References: N-CVE-2017-0333.
Problem types: description: Elevation of Privilege
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2017-03-08T01:00:00.000Z
CVE-2017-0334 
An information disclosure vulnerability in the NVIDIA GPU driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.18. Android ID: A-33245849. References: N-CVE-2017-0334.
Problem types: description: Information Disclosure Vulnerability
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2017-03-08T01:00:00.000Z
CVE-2017-0335 
An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-33043375. References: N-CVE-2017-0335.
Problem types: description: Elevation of Privilege
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2017-03-08T01:00:00.000Z
CVE-2017-0336 
An information disclosure vulnerability in the NVIDIA GPU driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.18. Android ID: A-33042679. References: N-CVE-2017-0336.
Problem types: description: Information Disclosure Vulnerability
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2017-03-08T01:00:00.000Z
CVE-2017-0337 
An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-31992762. References: N-CVE-2017-0337.
Problem types: description: Elevation of Privilege
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2017-03-08T01:00:00.000Z
CVE-2017-0338 
An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-33057977. References: N-CVE-2017-0338.
Problem types: description: Elevation of Privilege
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2017-03-08T01:00:00.000Z
CVE-2017-0339 
An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10. Android ID: A-27930566. References: N-CVE-2017-0339.
Problem types: description: Elevation of privilege
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2017-04-05T14:00:00.000Z
CVE-2017-0340 
An elevation of privilege vulnerability in the NVIDIA Libnvparser component due to a memcpy into a fixed sized buffer with a user-controlled size could lead to a memory corruption and possible remote code execution. This issue is rated as High. Product: Android. Version: N/A. Android ID: A-33968204. References: N-CVE-2017-0340.
Problem types: description: Elevation of Privilege
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2017-07-07T14:00:00.000Z
CVE-2017-0341 
All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where user provided input can trigger an access to a pointer that has not been initialized which may lead to denial of service or potential escalation of privileges.
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2017-05-09T21:00:00.000Z
CVE-2017-0342 
All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler where incorrect calculation may cause an invalid address access leading to denial of service or potential escalation of privileges.
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2017-05-09T21:00:00.000Z
CVE-2017-0343 
All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) where user can trigger a race condition due to lack of synchronization in two functions leading to a denial of service or potential escalation of privileges.
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2017-05-09T21:00:00.000Z
CVE-2017-0344 
All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape may allow users to gain access to arbitrary physical memory, leading to escalation of privileges.
Problem types: description: Information Disclosure, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2017-05-09T21:00:00.000Z
CVE-2017-0345 
All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where user provided input used as an array size is not correctly validated allows out of bound access in kernel memory and may lead to denial of service or potential escalation of privileges
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2017-05-09T21:00:00.000Z
CVE-2017-0346 
All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the size of an input buffer is not validated, leading to denial of service or potential escalation of privileges.
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2017-05-09T21:00:00.000Z
CVE-2017-0347 
All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value passed from a user to the driver is not correctly validated and used as the index to an array, which may lead to denial of service or potential escalation of privileges.
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2017-05-09T21:00:00.000Z
CVE-2017-0348 
All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler where a NULL pointer dereference may lead to denial of service or potential escalation of privileges.
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2017-05-09T21:00:00.000Z
CVE-2017-0349 
All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a pointer passed from a user to the driver is not correctly validated before it is dereferenced for a write operation, may lead to denial of service or potential escalation of privileges.
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2017-05-09T21:00:00.000Z
CVE-2017-0350 
All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used in an offset calculation may lead to denial of service or potential escalation of privileges.
Problem types: description: Denial of Service
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2017-05-09T21:00:00.000Z
CVE-2017-0351 
All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges.
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2017-05-09T21:00:00.000Z
CVE-2017-0352 
All versions of the NVIDIA GPU Display Driver contain a vulnerability in the GPU firmware where incorrect access control may allow CPU access sensitive GPU control registers, leading to an escalation of privileges
Problem types: description: Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2017-05-09T21:00:00.000Z
CVE-2017-0353 
All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgDdiEscape where due to improper locking on certain conditions may lead to a denial of service
Problem types: description: Denial of Service
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2017-05-09T21:00:00.000Z
CVE-2017-0354 
All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgkDdiEscape where a call to certain function requiring lower IRQL can be made under raised IRQL which may lead to a denial of service.
Problem types: description: Denial of Service
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2017-05-09T21:00:00.000Z
CVE-2017-0355 
All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgkDdiEscape where it may access paged memory while holding a spinlock, leading to a denial of service.
Problem types: description: Denial of Service
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2017-05-09T21:00:00.000Z
CVE-2017-0356 Authentication bypass via repeated parameters
A flaw, similar to to CVE-2016-9646, exists in ikiwiki before 3.20170111, in the passwordauth plugin's use of CGI::FormBuilder, allowing an attacker to bypass authentication via repeated parameters.
Problem types: description: authentication bypass
Affected products: vendor: ikiwiki
product: ikiwiki
Published: 2018-04-13T15:00:00.000Z
CVE-2017-0357 iucode-tool: heap buffer overflow on -tr loader
A heap-overflow flaw exists in the -tr loader of iucode-tool starting with v1.4 and before v2.1.1, potentially leading to SIGSEGV, or heap corruption.
Problem types: description: heap-buffer overflow
Affected products: vendor: iucode-tool
product: iucode-tool
Published: 2018-04-13T15:00:00.000Z
CVE-2017-0358 ntfs-3g: Modprobe influence vulnerability via environment variables
Jann Horn of Google Project Zero discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing modprobe with elevated privileges. A local user can take advantage of this flaw for local root privilege escalation.
Problem types: description: privilege escalation
Affected products: vendor: ntfs-3g
product: ntfs-3g
Credits: lang: en
value: Jann Horn of Google Project Zero
Published: 2018-04-13T15:00:00.000Z