CVE-2020-5984

2020-10-0221:10:21

nvidia

www.cve.org

nvidia

virtual gpu manager

use-after-free

vulnerability

denial of service

code execution

information disclosure

AI Score

7.5

Confidence

High

EPSS

Percentile

12.6%

JSON

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which it may have the use-after-free vulnerability while freeing some resources, which may lead to denial of service, code execution, and information disclosure. This affects vGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0.

CNA Affected

[
  {
    "product": "NVIDIA vGPU Software",
    "vendor": "NVIDIA",
    "versions": [
      {
        "status": "affected",
        "version": "vGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0"
      }
    ]
  }
]

References

nvidia.custhelp.com/app/answers/detail/a_id/5075