Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-1057

Опубликовано: 08 янв. 2021
Источник: nvd
CVSS3: 7.8
CVSS2: 4.6
EPSS Низкий

Описание

NVIDIA Virtual GPU Manager NVIDIA vGPU manager contains a vulnerability in the vGPU plugin in which it allows guests to allocate some resources for which the guest is not authorized, which may lead to integrity and confidentiality loss, denial of service, or information disclosure. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*
Версия от 8.0 (включая) до 8.6 (исключая)
cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*
Версия от 11.0 (включая) до 11.3 (исключая)

Одно из

cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*
cpe:2.3:o:nutanix:ahv:-:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*
cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*

EPSS

Процентиль: 17%
0.00054
Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-770

Связанные уязвимости

github логотип

GHSA-mr62-x8vh-x4g5

github
больше 3 лет назад

NVIDIA Virtual GPU Manager NVIDIA vGPU manager contains a vulnerability in the vGPU plugin in which it allows guests to allocate some resources for which the guest is not authorized, which may lead to integrity and confidentiality loss, denial of service, or information disclosure. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).

EPSS

Процентиль: 17%
0.00054
Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-770