CVE-2021-1064: NULL Pointer Dereference

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which it obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer, which may lead to information disclosure or denial of service. This affects vGPU version 8.x prior to 8....

PT-2021-13461

Name of the Vulnerable Software and Affected Versions NVIDIA vGPU manager versions 8.x through 8.5 NVIDIA vGPU manager versions 11.0 through 11.2 Description The NVIDIA vGPU manager contains a vulnerability in the vGPU plugin where input data is not validated. This may lead to tampering of data o...

PT-2021-13459

Name of the Vulnerable Software and Affected Versions NVIDIA vGPU manager versions 8.x prior to 8.6 NVIDIA vGPU manager versions 11.0 prior to 11.3 Description The NVIDIA vGPU manager contains a vulnerability in the vGPU plugin where an input offset is not validated, potentially leading to a buff...

PT-2021-13455

Name of the Vulnerable Software and Affected Versions NVIDIA vGPU manager versions 8.x prior to 8.6 NVIDIA vGPU manager versions 11.0 prior to 11.3 Description The NVIDIA vGPU manager contains a vulnerability in the vGPU plugin where an input index is not validated, potentially leading to integer...

PT-2021-13460

Name of the Vulnerable Software and Affected Versions NVIDIA vGPU manager versions 8.x prior to 8.6 NVIDIA vGPU manager versions 11.0 prior to 11.3 Description The NVIDIA vGPU manager contains a vulnerability in the vGPU plugin. This vulnerability occurs when the plugin obtains a value from an...

CVE-2021-1060: Improper Input Validation

NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and vGPU plugin, in which an input index is not validated, which may lead to tampering of data or denial of service. This affects vGPU version 8.x prior to 8.6 and version 11.0 prior to 11.3...

CVE-2021-1061: Concurrent Execution using Shared Resource with Improper Synchronization

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which a race condition may cause the vGPU plugin to continue using a previously validated resource that has since changed, which may lead to denial of service or information disclosure. This affects vGPU version 8.x prior to 8.6...

CVE-2021-1059: Integer Overflow or Wraparound

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input index is not validated, which may lead to integer overflow, which in turn may cause tampering of data, information disclosure, or denial of service. This affects vGPU version 8.x prior to 8.6 and version 11.0 prior...

PT-2021-13462

Name of the Vulnerable Software and Affected Versions NVIDIA vGPU manager versions 8.x through 8.5 NVIDIA vGPU manager versions 11.0 through 11.2 Description The issue arises from the lack of input data validation in the vGPU plugin, potentially leading to unexpected resource consumption and deni...

CVE-2021-1066: Improper Input Validation

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which input data is not validated, which may lead to unexpected consumption of resources, which in turn may lead to denial of service. This affects vGPU version 8.x prior to 8.6 and version 11.0 prior to 11.3...

CVE-2021-1063: Out-of-bounds Read

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input offset is not validated, which may lead to a buffer overread, which in turn may cause tampering of data, information disclosure, or denial of service. This affects vGPU version 8.x prior to 8.6 and version 11.0 pri...

CVE-2021-1062: Improper Validation of Specified Quantity in Input

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input data length is not validated, which may lead to tampering of data or denial of service. This affects vGPU version 8.x prior to 8.6 and version 11.0 prior to 11.3...

Security Bulletin: NVIDIA GPU Display Driver - January 2021

NVIDIA has released a software security update for NVIDIA® GPU Display Driver. This update addresses issues that may lead to denial of service, escalation of privileges, data tampering, or information disclosure. To protect your system, download and install this software update from the NVIDIA...

CVE-2020-5987

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which guest-supplied parameters remain writable by the guest after the plugin has validated them, which may lead to the guest being able to pass invalid parameters to plugin handlers, which may lead to denial of service or...

CVE-2020-5984

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which it may have the use-after-free vulnerability while freeing some resources, which may lead to denial of service, code execution, and information disclosure. This affects vGPU version 8.x prior to 8.5, version 10.x prio...

CVE-2020-5988

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which allocated memory can be freed twice, which may lead to information disclosure or denial of service. This affects vGPU version 8.x prior to 8.5, version 10.x prior to 10.4 and version 11.0...

CVE-2020-5983

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin and the host driver kernel module, in which the potential exists to write to a memory location that is outside the intended boundary of the frame buffer memory allocated to guest operating systems, which may lead to denial of...

CVE-2020-5985

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data length is not validated, which may lead to tampering or denial of service. This affects vGPU version 8.x prior to 8.5, version 10.x prior to 10.4 and version 11.0...

CVE-2020-5986

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data size is not validated, which may lead to tampering or denial of service. This affects vGPU version 8.x prior to 8.5, version 10.x prior to 10.4 and version 11.0...

CVE-2020-5972

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which local pointer variables are not initialized and may be freed later, which may lead to tampering or denial of service. This affects vGPU version 8.x prior to 8.4, version 9.x prior to 9.4 and version 10.x prior to 10....