NVIDIA NVIDIA vGPU Software
En bref
- Source
- NVD
- EPSS
- EPSS 0.37 % · centile 30 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- nvidia
- Statut NVD
- Modified
Rechercher sur…
Description
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which it may have the use-after-free vulnerability while freeing some resources, which may lead to denial of service, code execution, and information disclosure. This affects vGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0.
Faiblesses (CWE)
- CWE-416 — Utilisation après libération
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | MEDIUM 4.6 | AV:L/AC:L/Au:N/C:P/I:P/A:P | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2020-27138
- GCVE · GCVE-0-2020-5984
Configurations affectées (CPE NVD)
cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*≥ 8.0 < 8.5cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*≥ 10.0 < 10.4cpe:2.3:a:nvidia:virtual_gpu_manager:11.0:*:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| NVIDIA · NVIDIA vGPU Software | affected vGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |