Lucene search

K
cvelistNvidiaCVELIST:CVE-2024-0086
HistoryJun 13, 2024 - 9:23 p.m.

CVE-2024-0086 CVE

2024-06-1321:23:32
CWE-476
nvidia
www.cve.org
5
nvidia
vgpu
software
vulnerability
linux
null pointer
denial of service
undefined behavior
exploit
cve-2024-0086

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

9.0%

NVIDIA vGPU software for Linux contains a vulnerability where the software can dereference a NULL pointer. A successful exploit of this vulnerability might lead to denial of service and undefined behavior in the vGPU plugin.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "vGPU software and Cloud Gaming",
    "vendor": "nvidia",
    "versions": [
      {
        "status": "affected",
        "version": "All versions up to and including 17.1, 16.5, 13.10, and the April 2024 release"
      }
    ]
  }
]

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

9.0%

Related for CVELIST:CVE-2024-0086