NVIDIA NVIDIA vGPU Software
En bref
- Source
- NVD
- EPSS
- EPSS 0.27 % · centile 20 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- nvidia
- Statut NVD
- Modified
Description
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data size is not validated, which may lead to tampering or denial of service. This affects vGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0.
Faiblesses (CWE)
- CWE-20 — Validation d'entrée incorrecte
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | LOW 2.1 | AV:L/AC:L/Au:N/C:N/I:N/A:P | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2020-27140
- GCVE · GCVE-0-2020-5986
Configurations affectées (CPE NVD)
cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*≥ 8.0 < 8.5cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*≥ 10.0 < 10.4cpe:2.3:a:nvidia:virtual_gpu_manager:11.0:*:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| NVIDIA · NVIDIA vGPU Software | affected vGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0. |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |