PT-2019-17822 · Nvidia · Nvidia Virtual Gpu Manager

Published 2019-11-09 · Updated 2020-08-24 · CVE-2019-5696

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions NVIDIA Virtual GPU Manager, all versions

Description The issue arises when a guest VM provides an incorrectly sized buffer, leading to GPU out-of-bound access. This can result in a denial of service.

Recommendations For all versions, apply a patch or update from NVIDIA to fix the out-of-bound access issue. If no specific fix is available, consider restricting access to the GPU or implementing additional security measures to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-131

Related Identifiers

CVE-2019-5696

Affected Products

Nvidia Virtual Gpu Manager

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2019-5696 · Security Note
• https://nvidia.custhelp.com/app/answers/detail/a_id/4907 · Vendor Advisory