Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2022-42261
HistoryDec 30, 2022 - 11:15 p.m.

CVE-2022-42261

2022-12-3023:15:11
Debian Security Bug Tracker
security-tracker.debian.org
26
nvidia
vgpu
manager
vulnerability
input index
validation
issue
buffer overrun
data tampering
information disclosure
denial of service
unix

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

13.0%

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclosure, or denial of service.

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

13.0%

Related for DEBIANCVE:CVE-2022-42261