Lucene search

NvidiaCVE-2021-1057

HistoryJan 08, 2021 - 3:15 p.m.

CVE-2021-1057

2021-01-0815:15:12

CWE-770

nvidia

web.nvd.nist.gov

nvidia

vgpu

manager

vulnerability

security

allocation

integrity

confidentiality

denial of service

information disclosure

cve-2021-1057

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

Percentile

12.6%

JSON

NVIDIA Virtual GPU Manager NVIDIA vGPU manager contains a vulnerability in the vGPU plugin in which it allows guests to allocate some resources for which the guest is not authorized, which may lead to integrity and confidentiality loss, denial of service, or information disclosure. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).

Affected configurations

Nvd

Node

citrixhypervisorMatch-

nutanixahvMatch-

redhatenterprise_linux_kernel-based_virtual_machineMatch-

vmwarevsphereMatch-

AND

nvidiavirtual_gpu_managerRange8.0–8.6

nvidiavirtual_gpu_managerRange11.0–11.3

VendorProductVersionCPE
citrixhypervisor-cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*
nutanixahv-cpe:2.3:o:nutanix:ahv:-:*:*:*:*:*:*:*
redhatenterprise_linux_kernel-based_virtual_machine-cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*
vmwarevsphere-cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*
nvidiavirtual_gpu_manager*cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
citrix	hypervisor	-	cpe:2.3:o:citrix:hypervisor:-:::::::*
nutanix	ahv	-	cpe:2.3:o:nutanix:ahv:-:::::::*
redhat	enterprise_linux_kernel-based_virtual_machine	-	cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:::::::*
vmware	vsphere	-	cpe:2.3:o:vmware:vsphere:-:::::::*
nvidia	virtual_gpu_manager	*	cpe:2.3:a:nvidia:virtual_gpu_manager::::::::

CNA Affected

[
  {
    "product": "NVIDIA Virtual GPU Manager",
    "vendor": "NVIDIA",
    "versions": [
      {
        "status": "affected",
        "version": "Version 8.x (prior to 8.6) and version 11.0 (prior to 11.3)"
      }
    ]
  }
]

References

nvidia.custhelp.com/app/answers/detail/a_id/5142

Social References

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2021-1057