CVE-2018-3979 Details
Description
A remote denial-of-service vulnerability exists in the way the Nouveau Display Driver (the default Ubuntu Nvidia display driver) handles GPU shader execution. A specially crafted pixel shader can cause remote denial-of-service issues. An attacker can provide a specially crafted website to trigger this vulnerability. This vulnerability can be triggered remotely after the user visits a malformed website. No further user interaction is required. Vulnerable versions include Ubuntu 18.04 LTS (linux 4.15.0-29-generic x86_64), Nouveau Display Driver NV117 (vermagic: 4.15.0-29-generic SMP mod_unload).
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://talosintelligence.com/vulnerability_reports/TALOS-2018-0647 | CVE | ExploitThird Party Advisory |
| https://talosintelligence.com/vulnerability_reports/TALOS-2018-0647 | [email protected] | ExploitThird Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-400 | Uncontrolled Resource Consumption | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| canonical ubuntu linux | 18.04 |
CPE
Remediation
| |
| nvidia geforce gtx 745 firmware | All versions |
CPE
Remediation
| |
| nvidia geforce gtx 745 | All versions |
CPE
Remediation
| |
| nvidia geforce gtx 750 firmware | All versions |
CPE
Remediation
| |
| nvidia geforce gtx 750 | All versions |
CPE
Remediation
| |
| nvidia geforce gtx 750 ti firmware | All versions |
CPE
Remediation
| |
| nvidia geforce gtx 750 ti | All versions |
CPE
Remediation
| |
| nvidia geforce gtx 840m firmware | All versions |
CPE
Remediation
| |
| nvidia geforce gtx 840m | All versions |
CPE
Remediation
| |
| nvidia geforce gtx 845m firmware | All versions |
CPE
Remediation
| |
| nvidia geforce gtx 845m | All versions |
CPE
Remediation
| |
| nvidia geforce gtx 850m firmware | All versions |
CPE
Remediation
| |
| nvidia geforce gtx 850m | All versions |
CPE
Remediation
| |
| nvidia geforce gtx 860m firmware | All versions |
CPE
Remediation
| |
| nvidia geforce gtx 860m | All versions |
CPE
Remediation
| |
| nvidia geforce gtx 950m firmware | All versions |
CPE
Remediation
| |
| nvidia geforce gtx 950m | All versions |
CPE
Remediation
| |
| nvidia geforce gtx 960m firmware | All versions |
CPE
Remediation
| |
| nvidia geforce gtx 960m | All versions |
CPE
Remediation
| |
| nvidia quadro k620 firmware | All versions |
CPE
Remediation
| |
| nvidia quadro k620 | All versions |
CPE
Remediation
| |
| nvidia quadro k1200 firmware | All versions |
CPE
Remediation
| |
| nvidia quadro k1200 | All versions |
CPE
Remediation
| |
| nvidia quadro k2200 firmware | All versions |
CPE
Remediation
| |
| nvidia quadro k2200 | All versions |
CPE
Remediation
| |
| nvidia quadro m1000m firmware | All versions |
CPE
Remediation
| |
| nvidia quadro m1000m | All versions |
CPE
Remediation
| |
| nvidia quadro m1200m firmware | All versions |
CPE
Remediation
| |
| nvidia quadro m1200m | All versions |
CPE
Remediation
| |
| nvidia grid m30 firmware | All versions |
CPE
Remediation
| |
| nvidia grid m30 | All versions |
CPE
Remediation
| |
| nvidia grid m40 firmware | All versions |
CPE
Remediation
| |
| nvidia grid m40 | All versions |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Feb 9, 2023 | Modified Analysis | [email protected] |
| Apr 19, 2022 | CVE Modified | [email protected] |
| Apr 9, 2019 | Initial Analysis | [email protected] |