CVE-2021-1102

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) that may cause denial of service. The flaw arises from improper validation of the length field in a guest request, potentially enabling a guest to trigger a crash. Affected are vGPU software versions: 12.x (bef...

CVE-2021-1102

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it can lead to floating point exceptions, which may lead to denial of service. This affects vGPU version 12.x prior to 12.3, version 11.x prior to 11.5 and version 8.x prior 8.8...

CVE-2021-1101

CVE-2021-1101 affects NVIDIA vGPU software: a NULL pointer dereference in the Virtual GPU Manager (vGPU plugin) can cause denial of service. Affected versions are vGPU 12.x before 12.3, 11.x before 11.5, and 8.x before 8.8. Remediation per NVIDIA/NVD guidance is to upgrade to the respective patch...

CVE-2021-1101

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it can dereference a NULL pointer, which may lead to denial of service. This affects vGPU version 12.x prior to 12.3, version 11.x prior to 11.5 and version 8.x prior 8.8...

CVE-2021-1100

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager kernel mode driver nvidia.ko, in which a pointer to a user-space buffer is not validated before it is dereferenced, which may lead to denial of service. This affects vGPU version 12.x prior to 12.3, version 11.x prior to 11....

CVE-2021-1100

CVE-2021-1100 affects NVIDIA vGPU Software: the kernel-mode driver nvidia.ko dereferences an unvalidated user-space buffer pointer, potentially enabling denial of service. Affected lines show vGPU versions 12.x (before 12.3), 11.x (before 11.5), and 8.x (before 8.8). NVIDIA's advisory/bulletin in...

CVE-2021-1099

CVE-2021-1099 affects NVIDIA vGPU software (Virtual GPU Manager). The vulnerability is a stack-based buffer overflow in the vGPU plugin that could allow a guest to place a crafted ROP gadget on the stack, with potential information disclosure, data tampering, or denial of service. Affected are vG...

CVE-2021-1099

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin that could allow an attacker to cause stack-based buffer overflow and put a customized ROP gadget on the stack. Such an attack may lead to information disclosure, data tampering, or denial of service. This affect...

CVE-2021-1098

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it doesn't release some resources during driver unload requests from guests. This flaw allows a malicious guest to perform operations by reusing those resources, which may lead to information disclosure,...

CVE-2021-1098

NVIDIA vGPU Software contains CVE-2021-1098: a vulnerability in the Virtual GPU Manager where it does not release certain resources during driver unload from guests. This can allow a malicious guest to reuse freed resources, potentially leading to information disclosure, data tampering, or denial...

CVE-2021-1097

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it improperly validates the length field in a request from a guest. This flaw allows a malicious guest to send a length field that is inconsistent with the actual length of the input, which may lead to...

CVE-2021-1097

CVE-2021-1097 affects NVIDIA vGPU software, specifically the Virtual GPU Manager (vGPU plugin). The flaw arises from improper validation of the length field in a guest request, allowing a malicious guest to send a length inconsistent with input, potentially leading to information disclosure, data...

USN-5019-1: NVIDIA graphics drivers vulnerabilities

It was discovered that an assert could be triggered in the NVIDIA graphics drivers. A local attacker could use this to cause a denial of service. CVE-2021-1093 It was discovered that the NVIDIA graphics drivers permitted an out-of-bounds array access. A local attacker could use this to cause a...

USN-5019-1 nvidia-graphics-drivers-390, nvidia-graphics-drivers-418-server, nvidia-graphics-drivers-450-server, nvidia-graphics-drivers-460, nvidia-graphics-drivers-460-server, nvidia-graphics-drivers-470 vulnerabilities

It was discovered that an assert could be triggered in the NVIDIA graphics drivers. A local attacker could use this to cause a denial of service. CVE-2021-1093 It was discovered that the NVIDIA graphics drivers permitted an out-of-bounds array access. A local attacker could use this to cause a...

Ubuntu: Security Advisory (USN-5019-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 18.04 LTS / 20.04 LTS : NVIDIA graphics drivers vulnerabilities (USN-5019-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5019-1 advisory. It was discovered that an assert could be triggered in the NVIDIA graphics drivers. A local attacker could use this to cause a denial of...

[ASA-202107-58] nvidia-utils: multiple issues

Arch Linux Security Advisory ASA-202107-58 ========================================== Severity: Medium Date : 2021-07-21 CVE-ID : CVE-2021-1093 CVE-2021-1094 CVE-2021-1095 Package : nvidia-utils Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-2193 Summary ======= The...

CVE-2021-1093

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in firmware where the driver contains an assert or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary, and may lead to denial of...

CVE-2021-1095

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer nvlddmkm.sys handlers for all control calls with embedded parameters where dereferencing an untrusted pointer may lead to denial of service...

CVE-2021-1094

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where an out of bounds array access may lead to denial of service or information disclosure...