CVE-2021-1080
Severity Score
7.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), in which certain input data is not validated, which may lead to information disclosure, tampering of data, or denial of service. This affects vGPU version 12.x (prior to 12.2), version 11.x (prior to 11.4) and version 8.x (prior 8.7).
El software NVIDIA vGPU contiene una vulnerabilidad en Virtual GPU Manager (plugin vGPU), en la que determinados datos de la entrada no se comprobaban, lo que puede conllevar a una divulgación de información, manipulación de datos o denegación de servicio. Esto afecta a vGPU versión 12.x (versiones anteriores a la 12.2), versiones 11.x (versiones anteriores a la 11.4) y versión 8.x (versiones anteriores a la 8.7).
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-11-12 CVE Reserved
- 2021-04-29 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://nvidia.custhelp.com/app/answers/detail/a_id/5172 | 2021-05-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Nvidia Search vendor "Nvidia" | Virtual Gpu Manager Search vendor "Nvidia" for product "Virtual Gpu Manager" | >= 8.0 < 8.7 Search vendor "Nvidia" for product "Virtual Gpu Manager" and version " >= 8.0 < 8.7" | - |
Affected
| in | Citrix Search vendor "Citrix" | Hypervisor Search vendor "Citrix" for product "Hypervisor" | - | - |
Safe
|
| Nvidia Search vendor "Nvidia" | Virtual Gpu Manager Search vendor "Nvidia" for product "Virtual Gpu Manager" | >= 8.0 < 8.7 Search vendor "Nvidia" for product "Virtual Gpu Manager" and version " >= 8.0 < 8.7" | - |
Affected
| in | Nutanix Search vendor "Nutanix" | Ahv Search vendor "Nutanix" for product "Ahv" | - | - |
Safe
|
| Nvidia Search vendor "Nvidia" | Virtual Gpu Manager Search vendor "Nvidia" for product "Virtual Gpu Manager" | >= 8.0 < 8.7 Search vendor "Nvidia" for product "Virtual Gpu Manager" and version " >= 8.0 < 8.7" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Linux Kernel-based Virtual Machine Search vendor "Redhat" for product "Enterprise Linux Kernel-based Virtual Machine" | - | - |
Safe
|
| Nvidia Search vendor "Nvidia" | Virtual Gpu Manager Search vendor "Nvidia" for product "Virtual Gpu Manager" | >= 8.0 < 8.7 Search vendor "Nvidia" for product "Virtual Gpu Manager" and version " >= 8.0 < 8.7" | - |
Affected
| in | Vmware Search vendor "Vmware" | Vsphere Search vendor "Vmware" for product "Vsphere" | - | - |
Safe
|
| Nvidia Search vendor "Nvidia" | Virtual Gpu Manager Search vendor "Nvidia" for product "Virtual Gpu Manager" | >= 11.0 < 11.4 Search vendor "Nvidia" for product "Virtual Gpu Manager" and version " >= 11.0 < 11.4" | - |
Affected
| in | Citrix Search vendor "Citrix" | Hypervisor Search vendor "Citrix" for product "Hypervisor" | - | - |
Safe
|
| Nvidia Search vendor "Nvidia" | Virtual Gpu Manager Search vendor "Nvidia" for product "Virtual Gpu Manager" | >= 11.0 < 11.4 Search vendor "Nvidia" for product "Virtual Gpu Manager" and version " >= 11.0 < 11.4" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Linux Kernel-based Virtual Machine Search vendor "Redhat" for product "Enterprise Linux Kernel-based Virtual Machine" | - | - |
Safe
|
| Nvidia Search vendor "Nvidia" | Virtual Gpu Manager Search vendor "Nvidia" for product "Virtual Gpu Manager" | >= 11.0 < 11.4 Search vendor "Nvidia" for product "Virtual Gpu Manager" and version " >= 11.0 < 11.4" | - |
Affected
| in | Vmware Search vendor "Vmware" | Vsphere Search vendor "Vmware" for product "Vsphere" | - | - |
Safe
|
| Nvidia Search vendor "Nvidia" | Virtual Gpu Manager Search vendor "Nvidia" for product "Virtual Gpu Manager" | >= 12.0 < 12.2 Search vendor "Nvidia" for product "Virtual Gpu Manager" and version " >= 12.0 < 12.2" | - |
Affected
| in | Citrix Search vendor "Citrix" | Hypervisor Search vendor "Citrix" for product "Hypervisor" | - | - |
Safe
|
| Nvidia Search vendor "Nvidia" | Virtual Gpu Manager Search vendor "Nvidia" for product "Virtual Gpu Manager" | >= 12.0 < 12.2 Search vendor "Nvidia" for product "Virtual Gpu Manager" and version " >= 12.0 < 12.2" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Linux Kernel-based Virtual Machine Search vendor "Redhat" for product "Enterprise Linux Kernel-based Virtual Machine" | - | - |
Safe
|
| Nvidia Search vendor "Nvidia" | Virtual Gpu Manager Search vendor "Nvidia" for product "Virtual Gpu Manager" | >= 12.0 < 12.2 Search vendor "Nvidia" for product "Virtual Gpu Manager" and version " >= 12.0 < 12.2" | - |
Affected
| in | Vmware Search vendor "Vmware" | Vsphere Search vendor "Vmware" for product "Vsphere" | - | - |
Safe
|