CVE-2022-31618

2022-08-0521:15:08

CWE-476

[email protected]

web.nvd.nist.gov

nvidia

vgpu

vulnerability

null pointer

denial of service

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

12.6%

JSON

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a null pointer, which may lead to denial of service.

Affected configurations

Nvd

Node

nvidiavirtual_gpuRange11.0–11.8

nvidiavirtual_gpuRange13.0–13.3

nvidiavirtual_gpuMatch14.0

nvidiavirtual_gpuMatch14.1

VendorProductVersionCPE
nvidiavirtual_gpu*cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*
nvidiavirtual_gpu14.0cpe:2.3:a:nvidia:virtual_gpu:14.0:*:*:*:*:*:*:*
nvidiavirtual_gpu14.1cpe:2.3:a:nvidia:virtual_gpu:14.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
nvidia	virtual_gpu	*	cpe:2.3:a:nvidia:virtual_gpu::::::::
nvidia	virtual_gpu	14.0	cpe:2.3:a:nvidia:virtual_gpu:14.0:::::::*
nvidia	virtual_gpu	14.1	cpe:2.3:a:nvidia:virtual_gpu:14.1:::::::*