CVE-2018-3979

A remote denial-of-service vulnerability exists in the way the Nouveau Display Driver (the default Ubuntu Nvidia display driver) handles GPU shader execution. A specially crafted pixel shader can cause remote denial-of-service issues. An attacker can provide a specially crafted website to trigger this vulnerability. This vulnerability can be triggered remotely after the user visits a malformed website. No further user interaction is required. Vulnerable versions include Ubuntu 18.04 LTS (linux 4.15.0-29-generic x86_64), Nouveau Display Driver NV117 (vermagic: 4.15.0-29-generic SMP mod_unload).

• CWE-400

• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0647Exploit, Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0647Exploit, Third Party Advisory

Published

Apr 1, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-3973An exploitable out of bounds write exists in the CAL parsing…7.8
• CVE-2018-3974An exploitable local privilege elevation vulnerability exist…7.8
• CVE-2018-3975An exploitable uninitialized variable vulnerability exists i…7.5
• CVE-2018-3976An exploitable out-of-bounds write exists in the CALS Raster…7.8
• CVE-2018-3977An exploitable code execution vulnerability exists in the XC…8.8
• CVE-2018-3978An exploitable out-of-bounds write vulnerability exists in t…8.8
• CVE-2018-3980An exploitable out-of-bounds write exists in the TIFF-parsin…7.8
• CVE-2018-3981An exploitable out-of-bounds write exists in the TIFF-parsin…7.8
• CVE-2018-3982An exploitable arbitrary write vulnerability exists in the W…7.8
• CVE-2018-3983An exploitable uninitialized pointer vulnerability exists in…7.8
• CVE-2018-3984An exploitable uninitialized length vulnerability exists wit…7.8
• CVE-2018-3985An exploitable double free vulnerability exists in the mdnsc…9.8