PT-2022-3989 · Nvidia · Nvidia Virtual Gpu Manager

Published 2022-08-05 · Updated 2023-07-24 · CVE-2022-31609

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA Virtual GPU Manager (affected versions not specified)

Description The issue is related to insufficient authorization procedures in the NVIDIA Virtual GPU Manager component, which may allow an attacker to impact the confidentiality, integrity, and availability of protected information. This could lead to loss of data integrity and confidentiality, denial of service, or information disclosure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

BDU:2022-04822

CVE-2022-31609

Affected Products

Nvidia Virtual Gpu Manager

References · 7

• https://cve.org/CVERecord?id=CVE-2022-31609 · Security Note
• https://osv.dev/vulnerability/CVE-2022-31609 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-31609 · Vendor Advisory
• https://nvidia.custhelp.com/app/answers/detail/a_id/5383 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-04822 · Security Note
• https://ubuntu.com/security/CVE-2022-31609 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-31609 · Security Note