NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which input data is not validated, which may lead to unexpected consumption of resources, which in turn may lead to denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).
References
| Link | Resource |
|---|---|
| https://nvidia.custhelp.com/app/answers/detail/a_id/5142 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
12 Jul 2022, 17:42
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-20 |
11 Jan 2021, 20:59
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CONFIRM) https://nvidia.custhelp.com/app/answers/detail/a_id/5142 - Vendor Advisory | |
| CWE | CWE-400 | |
| CPE | cpe:2.3:o:nutanix:ahv:-:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:* cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:* cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:* cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : 2.1
v3 : 5.5 |
08 Jan 2021, 15:47
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-01-08 15:15
Updated : 2023-12-10 13:41
NVD link : CVE-2021-1066
Mitre link : CVE-2021-1066
CVE.ORG link : CVE-2021-1066
JSON object : View
Products Affected
redhat
- enterprise_linux_kernel-based_virtual_machine
nutanix
- ahv
nvidia
- virtual_gpu_manager
citrix
- hypervisor
vmware
- vsphere
CWE
CWE-20
Improper Input Validation