CVE-2021-1064 - NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which it obtains a value from an

CVE-2021-1064

Summary

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which it obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer, which may lead to information disclosure or denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5142

Vulnerable Configurations

cpe:2.3:a:nvidia:virtual_gpu_manager:8.0:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:virtual_gpu_manager:8.0:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:virtual_gpu_manager:8.1:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:virtual_gpu_manager:8.1:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:virtual_gpu_manager:8.2:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:virtual_gpu_manager:8.2:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:virtual_gpu_manager:8.3:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:virtual_gpu_manager:8.3:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:virtual_gpu_manager:8.4:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:virtual_gpu_manager:8.4:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:virtual_gpu_manager:8.5:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:virtual_gpu_manager:8.5:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:virtual_gpu_manager:11.0:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:virtual_gpu_manager:11.0:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:virtual_gpu_manager:11.1:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:virtual_gpu_manager:11.1:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:virtual_gpu_manager:11.2:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:virtual_gpu_manager:11.2:*:*:*:*:*:*:*
cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*
cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*
cpe:2.3:o:nutanix:ahv:-:*:*:*:*:*:*:*
cpe:2.3:o:nutanix:ahv:-:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*
cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*
cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*

CVSS

Base:	3.6 (as of 11-01-2021 - 20:56)
Impact:
Exploitability:

CWE

CWE-476

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	PARTIAL

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:N/A:P

refmap via4

confirm

https://nvidia.custhelp.com/app/answers/detail/a_id/5142

Last major update

11-01-2021 - 20:56

Published

08-01-2021 - 15:15

Last modified

11-01-2021 - 20:56