Improper access control in NVIDIA Windows GPU Display Driver - CVE-2018-6252
Published: April 12, 2018
Vulnerability identifier: #VU11794
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-6252
CWE-ID: CWE-284
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local attacker to cause DoS condition on the target system.
The weakness exists in the kernel mode layer handler for DxgkDdiEscape due to an access to restricted functionality that is unnecessary for production usage. A local attacker can cause the service to crash.
The weakness exists in the kernel mode layer handler for DxgkDdiEscape due to an access to restricted functionality that is unnecessary for production usage. A local attacker can cause the service to crash.
Affected software
NVIDIA Windows GPU Display Driver
Amazon Linux AMI
Amazon Linux AMI
How to mitigate CVE-2018-6252
Install update from vendor's website.