PT-2021-13454 · Nvidia · Nvidia Vgpu

Published 2021-01-08 · Updated 2023-08-08 · CVE-2021-1058

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA vGPU software versions 8.x through 8.5 NVIDIA vGPU software versions 11.0 through 11.2

Description The NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and vGPU plugin. This vulnerability occurs because an input data size is not validated, which may lead to tampering of data or denial of service.

Recommendations For NVIDIA vGPU software versions 8.x through 8.5, update to version 8.6 or later. For NVIDIA vGPU software versions 11.0 through 11.2, update to version 11.3 or later.

Fix

Weakness Enumeration

CWE-1284

Related Identifiers

CVE-2021-1058

Affected Products

Nvidia Vgpu

References · 5

• https://nvidia.custhelp.com/app/answers/detail/a_id/5142 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-1058 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-1058 · Security Note
• https://t.me/cvenotify/8329 · Telegram Post
• https://t.me/cibsecurity/21819 · Telegram Post