CVE-2021-1085
Severity Score
7.3
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where there is the potential to write to a shared memory location and manipulate the data after the data has been validated, which may lead to denial of service and escalation of privileges and information disclosure but attacker doesn't have control over what information is obtained. This affects vGPU version 12.x (prior to 12.2), version 11.x (prior to 11.4) and version 8.x (prior to 8.7).
El controlador NVIDIA vGPU contiene una vulnerabilidad en Virtual GPU Manager (plugin vGPU), donde se presenta la posibilidad de escribir en una ubicación de memoria compartida y manipular los datos después de que los datos se presentan han sido validados, lo que puede conllevar a una denegación de servicio y la escalada de privilegios y la divulgación de información, pero el atacante no tiene control sobre la información que se obtiene. Esto afecta a vGPU versión 12.x (anteriores a 12.2), versión 11.x (anteriores a 11.4) y versión 8.x (anteriores a 8.7).
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-11-12 CVE Reserved
- 2021-04-29 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://nvidia.custhelp.com/app/answers/detail/a_id/5172 | 2021-05-28 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Nvidia Search vendor "Nvidia" | Virtual Gpu Manager Search vendor "Nvidia" for product "Virtual Gpu Manager" | >= 8.0 < 8.7 Search vendor "Nvidia" for product "Virtual Gpu Manager" and version " >= 8.0 < 8.7" | - |
Affected
| in | Citrix Search vendor "Citrix" | Hypervisor Search vendor "Citrix" for product "Hypervisor" | - | - |
Safe
|
| Nvidia Search vendor "Nvidia" | Virtual Gpu Manager Search vendor "Nvidia" for product "Virtual Gpu Manager" | >= 8.0 < 8.7 Search vendor "Nvidia" for product "Virtual Gpu Manager" and version " >= 8.0 < 8.7" | - |
Affected
| in | Nutanix Search vendor "Nutanix" | Ahv Search vendor "Nutanix" for product "Ahv" | - | - |
Safe
|
| Nvidia Search vendor "Nvidia" | Virtual Gpu Manager Search vendor "Nvidia" for product "Virtual Gpu Manager" | >= 8.0 < 8.7 Search vendor "Nvidia" for product "Virtual Gpu Manager" and version " >= 8.0 < 8.7" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Linux Kernel-based Virtual Machine Search vendor "Redhat" for product "Enterprise Linux Kernel-based Virtual Machine" | - | - |
Safe
|
| Nvidia Search vendor "Nvidia" | Virtual Gpu Manager Search vendor "Nvidia" for product "Virtual Gpu Manager" | >= 8.0 < 8.7 Search vendor "Nvidia" for product "Virtual Gpu Manager" and version " >= 8.0 < 8.7" | - |
Affected
| in | Vmware Search vendor "Vmware" | Vsphere Search vendor "Vmware" for product "Vsphere" | - | - |
Safe
|
| Nvidia Search vendor "Nvidia" | Virtual Gpu Manager Search vendor "Nvidia" for product "Virtual Gpu Manager" | >= 11.0 < 11.4 Search vendor "Nvidia" for product "Virtual Gpu Manager" and version " >= 11.0 < 11.4" | - |
Affected
| in | Citrix Search vendor "Citrix" | Hypervisor Search vendor "Citrix" for product "Hypervisor" | - | - |
Safe
|
| Nvidia Search vendor "Nvidia" | Virtual Gpu Manager Search vendor "Nvidia" for product "Virtual Gpu Manager" | >= 11.0 < 11.4 Search vendor "Nvidia" for product "Virtual Gpu Manager" and version " >= 11.0 < 11.4" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Linux Kernel-based Virtual Machine Search vendor "Redhat" for product "Enterprise Linux Kernel-based Virtual Machine" | - | - |
Safe
|
| Nvidia Search vendor "Nvidia" | Virtual Gpu Manager Search vendor "Nvidia" for product "Virtual Gpu Manager" | >= 11.0 < 11.4 Search vendor "Nvidia" for product "Virtual Gpu Manager" and version " >= 11.0 < 11.4" | - |
Affected
| in | Vmware Search vendor "Vmware" | Vsphere Search vendor "Vmware" for product "Vsphere" | - | - |
Safe
|
| Nvidia Search vendor "Nvidia" | Virtual Gpu Manager Search vendor "Nvidia" for product "Virtual Gpu Manager" | >= 12.0 < 12.2 Search vendor "Nvidia" for product "Virtual Gpu Manager" and version " >= 12.0 < 12.2" | - |
Affected
| in | Citrix Search vendor "Citrix" | Hypervisor Search vendor "Citrix" for product "Hypervisor" | - | - |
Safe
|
| Nvidia Search vendor "Nvidia" | Virtual Gpu Manager Search vendor "Nvidia" for product "Virtual Gpu Manager" | >= 12.0 < 12.2 Search vendor "Nvidia" for product "Virtual Gpu Manager" and version " >= 12.0 < 12.2" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Linux Kernel-based Virtual Machine Search vendor "Redhat" for product "Enterprise Linux Kernel-based Virtual Machine" | - | - |
Safe
|
| Nvidia Search vendor "Nvidia" | Virtual Gpu Manager Search vendor "Nvidia" for product "Virtual Gpu Manager" | >= 12.0 < 12.2 Search vendor "Nvidia" for product "Virtual Gpu Manager" and version " >= 12.0 < 12.2" | - |
Affected
| in | Vmware Search vendor "Vmware" | Vsphere Search vendor "Vmware" for product "Vsphere" | - | - |
Safe
|