CVE-2017-6267: nvidia corporation gpu display driver Improper Initialization

Vulnerability summary

CVE-2017-6267 is a medium (CVSS 5.5) Improper Initialization vulnerability in nvidia corporation gpu display driver. EPSS estimates a 0.36% chance of exploitation in the next 30 days, higher than 28.1% of scored vulnerabilities.

Timeline

1. 22-09-2017
   PublishedVulnerability first disclosed.
2. 16-09-2024
   Last modifiedVulnerability information updated.

Description

NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where an incorrect initialization of internal objects can cause an infinite loop which may lead to a denial of service.

• CWE-665Improper InitializationThe product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.
• CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.