PT-2021-13509 · Nvidia · Nvidia Vgpu

Published 2021-10-29 · Updated 2021-11-02 · CVE-2021-1119

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions: NVIDIA vGPU software (affected versions not specified)

Description: The NVIDIA vGPU software contains a flaw in the Virtual GPU Manager (vGPU plugin) where it can double-free a pointer, potentially leading to denial of service. This issue may result in a write-what-where condition, allowing an attacker to execute arbitrary code, which impacts the integrity and availability of the system.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

CVE-2021-1119

Affected Products

Nvidia Vgpu

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2021-1119 · Security Note
• https://nvidia.custhelp.com/app/answers/detail/a_id/5230 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-1119 · Vendor Advisory
• https://t.me/cvenotify/22689 · Telegram Post
• https://t.me/cibsecurity/31485 · Telegram Post
• https://t.me/cvenotify/22889 · Telegram Post